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ation  questions  answered. 
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notification  of  replies  to  your 
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metrics  are  the  most  telling,  and  how  should  I  report  them?  9  —  How  is 
innovation  making  security  management  more  viable?  8  —  Which  optimization 
techniques  add  the  most  value?  for  the  rest:  Attend  Network  Management: 
The  New  Core  Competency,  a  free  Technology  Tour  Event.  Learn  more  at: 
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Free  e-mail  newsletters 
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the  search  box  on  the  home  page,  and  you’ll  jump  directly 
to  the  requested  information. 
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Survival  of  the 
fittest  managed 
service  providers 


BY  DENISE  DUBIE 

The  market  for  managed  service 
providers  sprang  up  and  flour¬ 
ished  in  the  late  1990s  and  early 
2000s,  then  wilted  just  as  quickly 
Many  went  bust  or  succumbed  to 
acquisition, but  the  sawiest  adapt¬ 
ed  their  business  models  and 
tweaked  their  offerings  to  survive 
the  changing  market. 

Today  some  survivors  are  thriv¬ 
ing,  some  with  upwards  of  70% 
year-over-year  revenue  growth, 
and  new  providers  are  emerging. 
Industry  watchers  say  the  current 
market  climate  is  right  for  cus¬ 
tomers,  who  have  grown  more 
confident  of  managed  services’ 
reliability  and  security  and  for 
MSPs  themselves. 

“Specialty  managed  services 
such  as  security  and  storage,  and 
software-as-a-service  licensing 
models  are  popular  among  IT 
buyers  now;”  says  Jeff  Kaplan, 
managing  director  at  ThinkStrate- 
gies.  “Similar  to  Salesforce.com, 
today’s  services  provide  cus¬ 
tomers  with  an  on-demand 
model  for  management.” 

Newer  companies  such  as 
Corente,  Kaseya  and  N-Able  Tech¬ 
nologies  package  their  software 
platforms  for  use  by  systems  inte¬ 
grators  and  for  value-added 
resellers  (VAR)  to  sell  directly  to 
customers.  Others  such  as  Center- 
Beam  focus  primarily  on  small 
and  midsize  businesses,  and 
Perimeter  Internetworking  pro¬ 
vides  managed  security  services 
to  enterprises.  Managed  e-mail 
messaging  and  archiving  prod¬ 
ucts  from  companies  such  as 
FrontBridge  Technologies, 
MessageLabs  and  Postini  also 
have  become  popular  with  cus¬ 
tomers.  In  addition,  IT  buyers  over 
the  past  two  years  have  invested 
more  in  managed  storage  ser¬ 
vices  from  EMC,  HP  and  IBM. 

Charles  Weaver,  president  of  the 
MSP  Alliance,  says  one  reason 
providers  continue  to  emerge  is 
that  getting  started  is  not  as  much 


Tips  for  working 
with  managed 
service  providers 

Here's  what  industry 
watchers  say  to  consider 
when  outsourcing: 

Customer  support:  A  fancy  network 
operations  center  may  not  be 
necessary,  but  be  certain  the  MSP 
dedicates  support  staff  to  your 
account. 

Integration:  With  multiple  best-of- 
breed  services  available,  ask  the 
MSP  how  its  offerings  can  work  with 
other  services  you  might  have  in 
place  or  are  considering. 

Reporting:  Make  the  MSP 
accountable.  Require  it  to  provide 
extensive  reporting  as  part  of  your 
managed  services  contract. 

Scalability:  The  MSP  could  be 
addressing  an  isolated  IT  task,  but 
be  sure  the  niche  service  can  scale 
to  your  network's  needs. 


of  an  obstacle  as  it  used  to  be. 

“In  the  past  you  needed  a  huge 
pile  of  [venture  capital]  money 
to  get  started,  because  the  infra¬ 
structure  and  management  tools 
were  cost-exorbitant,”  he  says. 
“Now  that  software  licensing 
models  are  more  flexible  and  it’s 
been  proven  there  is  no  need  for 
a  hardened  [network  operations 
center]  to  deliver  services,  new 
companies  can  get  off  the  ground 
more  quickly’ 

Here  are  the  stories  of  three 
MSPs  that  have  weathered  the  in¬ 
dustry’s  ups  and  downs. 

Everdream 

Among  the  survivors,  Ever¬ 
dream  is  the  one  that  had  to 
change  the  least.  Founded  in 
1998,  Everdream  got  $50  million 
in  venture  funding  in  2000  and 
another  $20  million  in  2005.  It 
See  MSP,  page  18 


Ford  not  quite  in 
cruise  control 


Automaker’s  wireless 
project  hasn’t  stalled, 
but  isn’t  accelerating. 

BY  DENISE  PAPPALARDO 

A  trend  that  has  taken  the  consumer  world  by 
storm  —  ditching  home  landlines  for  mobile  phone 
service  —  is  having  a  more  difficult  time  catching  on 
in  the  corporate  world. 

Ford  Motor  Co.  brought  attention  to  the  workplace 
alternative  a  year  ago  with  its  announcement  that 
8,000  employees  would  be  cutting  the  cord.  And 
although  Ford  today  reports  the 
migration  went  well,  even  the 
automaker  expresses  concerns 
about  expanding  the  project  — 
and  has  no  timetable  for  doing  so. 

“Overall  I’d  say  it  has  gone  very 
well,” says  Jeff  Lemmer,IT  manager 
of  telecom  services  at  Ford.  “Our 
biggest  concern  going  into  this 
was  coverage.  [Sprint]  has  gone 
beyond  our  expectations.” 

Lemmer  says  Sprint  did  a  lot  of 
work  upfront  and  throughout  the 
12-month  deployment  to  make 
sure  Ford’s  employees  would  have  reliable,  high-qual¬ 
ity  service. 

Although  employee  response  has  been  positive,  he 
says  other  issues  will  prevent  the  automaker  from 
expanding  its  deployment  for  now. Those  include  the 
lack  of  handsets  designed  for  business  users,  the  lack 
of  mature  wireless-to-wireline  integration  products 
and  the  need  for  wireless  service  providers  to  change 
the  way  they  view  business  customers. 

Industry  experts  say  such  issues  are  undoubtedly 
keeping  others  from  following  Ford’s  lead. 

“It’s  not  surprising  that  we  haven’t  heard  of  many 
other  large  business  users  making  the  switch,”  says 
Phil  Redman,  a  vice  president  at  Gartner.  “There  are 
still  a  lot  of  challenges  with  in-building  coverage,  lack 
of  features  such  as  four-digit  dialing,  and  poor 
[device]  battery  life,”  he  says. 

Despite  inquiries  to  all  of  the  major  wireless  service 
providers,  Network  World  was  not  able  to  find  any 
examples  of  other  large-scale  deployments. 

“People  are  in  discovery  mode”  when  it  comes  to 
cutting  the  cord  to  traditional  phone  services  for  an 
all-mobile  alternative,  says  Bob  Egan,  research  direc¬ 
tor  of  emerging  technologies  at  Tower  Group. 

“Ford  is  perhaps  the  most  notable,  but  some  users 
within  IBM’s  salesforce.some  at  Goldman  Sachs  and 


Pioneer  Investments  have  also  made  the  move.  Cell 
phone  makers  and  service  providers  are  making 
inroads  into  offering  users  more  ergonomic  devices, 
but  frankly  users  like  Ford  are  going  to  be  more  of 
the  exception  than  the  rule  for  some  time.” 

That  doesn’t  mean  the  wireless  carriers  aren’t 
actively  currying  favor  with  businesses.  Cingular 
Wireless  and  Verizon  Wireless  have  made  announce¬ 
ments  this  year  about  new  services  geared  to  wire¬ 
less  users.  Sprint  has  been  ahead  of  the  pack,  offering 
services  specifically  geared  to  business  users  for 
nearly  three  years.  According  to  Lemmer  and  ana¬ 
lysts,  however,  more  work  needs  to  be  done. 

‘The  only  thing  I  wish  would  change  is  just  how  the 

iijhe  only  thing  I  wish 
would  change  is  just 
how  the  cellular  companies 
treat  the  business 
community.^ 

Jeff  Lemmer,  IT  manager  of  telecom  services, 
Ford 

cellular  companies  treat  the  business  community?’ 
Lemmer  says. “That  is  something  that’s  really  impor¬ 
tant,  to  make  sure  the  product  development  organi¬ 
zations  of  those  companies  realize  that  the  business 
mentality  is  different  from  the  consumer  mind-set 
and  they’re  going  to  have  different  needs.” 

“Nextel  is  probably  the  closest  . . .  with  a  little  bit 
more  of  that  business  mentality?’  he  says.“We’re  really 
hoping  to  see  more  of  that  type  of  collaboration  now 
that  Sprint  and  Nextel  have  come  together^ 

Many  of  Ford’s  8,000  users  also  use  Sprint’s 
ReadyLink  walkie-talkie  service,  which  saps  more  bat¬ 
tery  life  from  the  phones  than  anticipated. 

“We  would  have  liked  a  handset  that  had  a  longer 
battery  life,  where  [users]  didn’t  have  to  plug  in  as 
often.  And  functions  like  advanced  voice  mail  sup¬ 
port,”  he  says. 

Device  manufacturers  and  service  providers  “typi¬ 
cally  engineer  and  design  handsets  for  the  consumer 
community?’  Lemmer  savs.  There  isn’t  a  mind-set  for 
meeting  the  type  of  functions  that  a  person  in  a  busi¬ 
ness  environment  needs.” 

Lemmer  says  Ford  may  still  expand  its  wireless-only 
deployment  to  “small  pockets  here  and  there,  but  it 
really  is  for  a  user  base  that  is  very  mobile  and  col- 

See  Ford,  page  10 
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IBM  stirs  SCO  lawsuit  pot 

IS  The  long-running  legal  battle  between  The  SCO  Group  and  IBM  over 
source  code  ownership  could  uncover  some  interesting  relationships, 
after  IBM  requested  last  week  that  BayStar  Capital,  HF^Microsoft  and 
Sun  turn  over  documents  relating  to  their  communications  with  SCO. 

The  subpoena  requests  seek  communications  between  the  companies 
and  SCO,  documents  concerning  efforts  to  maintain  the  secrecy  of  the 
Unix  source  code  and  information  related  to  royalties  paid  for  Unix.The 
dispute  dates  back  to  2003,  when  SCO  charged  IBM  with  offering  open 
source  software  based  on  source  code  SCO  owned. The  subpoena  requests  also 
could  reveal  information  relating  to  other  SCO  relationships,  particularly  with 


TheGoodTheBadTheUgly 

<  Happy  anniversary,  HP 

Labs.  HP  Labs  this  year  is  celebrating  its 
40th  anniversary.  Not  resting  on  its  laurels  for 
having  made  breakthroughs  in  everything  from 
calculators  to  printing,  researchers  at  the  lab  are 
envisioning  a  future  with  everything  from  virtual¬ 
ly  unstaffed  data  centers  to  low-cost,  lightweight 
multimedia  displays  as  small  as  a  watch  or  as 
large  as  a  wall. 

Teen  bloggers  exposed. 

Northwestern  University  researchers  say  teenage 
bloggers  are  putting  themselves  at  risk  for  cyber- 
stalking  and  cyberbullying  by  being  too  free  with 
their  real  names,  ages  and  offline  locations.  The  research,  which 
included  a  look  at  about  70  randomly  selected  teenagers'  blogs,  was 
being  discussed  this  past  weekend  at  a  science  convention  in  St.  Louis. 


Microsoft.  Just  after  SCO  filed  its  lawsuit  against  IBM,  Microsoft  signed  a  Unix 


licensing  agreement  with  SCO.  BayStar,  a  venture  capital  firm  that  invested  in  SCO, 


said  Microsoft  had  referred  it  to  SCO. 

German  telecom  calls  on  Google 

■  The  chief  executive  of  Deutsche  Telekom  became 
the  latest  head  of  a  major  telco  to  call  for  Web  com¬ 
panies,  such  as  Google  and  Yahoo,  to  contribute  to  the 
billions  of  dollars  required  to  build  and  maintain 
high-speed  Internet  infrastructure. “Customers  should 
not  be  the  only  ones  to  pay  for  this  new  world,”  CEO 
Kai-Uwe  Ricke  said  in  an  interview  published  last 
week  in  the  German  weekly  business  magazine 
WirtschaftsWoche.“Web  companies  that  use  this  infra¬ 
structure  for  their  business  should  also  make  a  contri- 
bution.”The  German  CEO’s  remarks  echo  those  made 
earlier  this  month  by  John  Thorne,  senior  vice  presi¬ 
dent  and  deputy  general  counsel  at  Verizon.  Vinton 
Cerf,  co-author  of  TCP/IP  and  a  Google  vice  president, 
has  warned  in  recent  interviews  that  the  Internet’s 
freedom  could  be  compromised  and  consumer 
choice  and  innovation  limited  if  protections  aren’t 
put  in  place  to  keep  the  Internet  free  and  neutral. 

Fingerprint  biometrics  advance 

■  University  of  Buffalo  researchers  say  they  have  put 
their  fingers  on  a  way  to  improve  the  security  of  wire- 

mm—m  COMPENDIUM 

World's  largest  app  error? 

On  a  recent  trip  to  New  York  City,  our  in 
trepid  staff  photographer  took  photos  of  a 
DirectX  error  splayed  across  a  frozen  two- 
story  electronic  billboard.  See  for  yourself 
—  and  jump  mto  the  operating  system 
flantewar  (if  you  dare)  at 
www.itww.com,  DocFinder:  2370. 


uote  o 

uote  o 

uote  a 


the  wee< 

e  wee 

ie  week 


th 


t 


) 


“Have  a  green-sounding 
employee  call  the  vendor’s  sup¬ 
port  line  during  off-hours  with  a 
tough  question  that  you  already 
know  the  answer  to.” 

Network  World  Lab  Alliance  member  David  Newman,  on  evaluat¬ 
ing  vendor  support.  Full  story,  page  66. 


less  handheld  devices  and  Web  sites.  The  findings 
also  could  help  eliminate  the  need  to  remember  a 
dizzying  array  of  passwords  and  aid  forensics  spe¬ 
cialists,  according  toVenu  Govindaraju.a  University  of 
Buffalo  professor  of  computer  science  and  engineer¬ 
ing,  and  director  of  the  school’s  Center  for  Unified 
Biometrics  and  Sensors.  The  research  specifies  how 
big  a  keypad  sensor  needs  to  be  and  how  big  a  fin¬ 
gerprint  image  should  be.  A  key  shortcoming  of  bio¬ 
metric  systems  now  is  that  sensors  often  can  take 
only  partial  fingerprints,  Govindaraju  says.  Enabling 
more  complete  fingerprinting  will  let  companies  bet¬ 
ter  gauge  the  level  of  security  they  can  provide,  he 
says.  The  algorithm  also  takes  into  account  the  fact 
that  even  a  legitimate  fingerprint  doesn’t  always  look 
the  same,  as  a  result  of  the  way  a  person  presses  on  a 
pad,  or  because  of  moisture  or  other  factors. 

IBM  protecting  us  from  our  own 

■  IBM  Friday  announced  a  security  product  that  helps 
protect  companies  from  internal  attacks  on  their  IT 
systems.  The  Identity  Risk  and  Identification  software 


Dell  gets  dumped.  In  a  blow  for  Dell,  the  company  con¬ 
firmed  last  week  that  it  has  lost  a  services  deal  with  Dutch  electronics 
giant  Koninklijke  Philips  Electronics  that  was  valued  at  as  much  as  S700 
million.  Although  Dell  declined  to  say  exactly  what  went  wrong,  the 
company  said  it  worked  with  Philips  for  the  past  12  months  to  provide 
hardware  and  managed  desktop  services.  Philips  continues  to  be  a  Dell 
products  customer. 


analyzes  user  activity  on  a  network,  looking  for  irregu¬ 
larities  that  might  indicate  unauthorized  or  improper 
access.  The  component  is  part  of  IBM’s  Identity  Man¬ 
agement  Services, one  of  its  security  software  offerings. 
The  software  is  configured  to  integrate  with  the  com¬ 
pany’s  Tivoli  Identity  Manager  and  Tivoli  Access  Man¬ 
ager,  both  of  which  manage  passwords  and  permission 
to  use  applications,  IBM  said.  The  software  can  com¬ 
pare  a  user’s  online  activity  with  previous  activity  and 
plot  that  use  against  other  peer  users.  It  can  also  do  a 
prospective  analysis,  providing  a  warning  of  potential 
misuse.  IBM  said  Identity  Risk  and  Identification  is  a 
step  beyond  user  IDs,  passwords*  and  biometric  or 
secure  cards,  because  those  identification  methods 
confirm  user  access  but  can’t  verify  proper  use. 

Data  thief  gets  eight  years  in  jail 

■  Scott  Levine,  formerly  principal  owner  of  e-mail 
marketing  firm  Snipermail,  last  week  was  sentenced 
to  eight  years  in  prison  on  charges  related  to  theft  of 
more  than  1  billion  data  records,  the  U.S.  Department 
of  Justice  said.  Levine, 46,  of  Boca  Raton,  Fla.,  was  sen¬ 
tenced  for  120  counts  of  unauthorized  access  of  a 
protected  computer,  two  counts  of  access  device 
fraud  and  one  count  of  obstruction  of  justice,  the 
Justice  Department  said.  Between  January  and  July 
2003,  while  at  Snipermail,  Levine  stole  records  con¬ 
taining  personal  information,  including  names,  physi¬ 
cal  and  e-mail  addresses,  and  phone  numbers.  The 
data  belonged  to  Acxiom,  a  repository  of  personal, 
financial  and  company  data,  including  customer 
information  held  for  other  companies.  Acxiom  offers 
customer  and  information  management  services,  as 
well  as  marketing  services. 
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RIM,  BlackBerry  users  win  reprieve  for  now 


BY  JOHN  COX 

In  perhaps  the  industry’s  biggest  anticli¬ 
max  so  far  this  year,  a  U.S.  District  Court 
judge  ended  Fridays  hearing  on  the 
Research  in  Motion  vs.  NTP  patent  battle 
without  deciding  much. 

Judge  James  Spencer  did  not  rule  on 
NTP’s  request  that  he  issue  an  updated  $126 
million  judgment  as  soon  as  possible,  or  on 
reinstating  an  injunction  to  block  RIM’s 
BlackBerry  service  in  the  United  States. 

Spencer  said  he  would  take  the  matter 
under  advisement  and  that  he  expected  to 
rule  first  on  the  damages  award.  A  jury  trial 
found  in  2002  that  RIM,  a  Canadian  com¬ 
pany  had  infringed  on  U.S.  patents  issued 
to  an  NTP  founder.  NTP  is  seeking  dam¬ 
ages  and  a  royalty  agreement  from  RIM, 
which  has  fought  a  delaying  action  since 
persuading  the  U.S.  Patent  and  Trademark 
Office  to  re-examine  the  patents. 

RIM  posted  a  brief  statement  Friday  on 
its  Web  site  that  it  had  received  that  day  a 
copy  of  yet  another  final  ruling  by  the 
Patent  Office  that  rejects  all  the  claims 


“Fundamentally  for 
[RIM],  settlement  has 
never  been  an  option.” 

Jim  Balsillie,  RIM  cochief  executive 

associated  with  the  third, and  according  to 
RIM,  final  NTP  patent.  Earlier  last  week,  the 
Patent  Office  issued  a  final  action  on 
another  NTP  patent.  NTP  can  appeal  these 
actions  to  a  Patent  Office  board,  and  if 
unable  to  overturn  them  there,  try  to  do  so 
via  federal  courts. 

Following  the  hearing,  RIM  co-chief  exec¬ 
utive  Jim  Balsillie  was  defiant  in  an  inter¬ 
view  with  CNBC,  according  to  the 
Canadian  newspaper,  The  Globe  and  Mail. 

“Fundamentally  for  Research  in  Motion, 
settlement  has  never  been  an  option,” 
Balsillie  was  quoted.  “Until  they  [NTP] 
change  their  tactics,  it  remains  not  an 
option.  So  we  have  to  plan  our  life  under¬ 
standing  that  we  go  ahead  with  the 
workaround  [software] ,  that  we  incur  the 


cost  of  the  workaround.  It’s  far  less  than 
any  settlement  cost.” 

RIM  recently  announced  a  few  sketchy 
details  of  new  software  that  the  company 
says  will  allow  U.S.  customers  to  continue 
using  the  service,  without  using  the  tech¬ 
nology  covered  by  the  NTP  patents. 

Last  week,  on  the  eve  of  the  hearing,  NTP 
issued  a  press  release  charging  that  RIM 
was  guilty  of  “numerous  mischaracteriza- 
tions”  about  the  validity  of  the  NTP 
patents.  NTP  argues  that  the  courts  have 
repeatedly  upheld  the  validity  of  the 
patents,  either  by  verdict  and  ruling  or  by 
declining  to  review  or  overturn  lower 
court  findings.  NTP  also  asserts  that  the 
current  review  by  the  Patent  Office  is  part 
of  a  lengthy  “re-examination  process”  that 
includes  internal  appeals  and  federal 
court  appeals. 

But  more  inflammatory  is  NTP’s  asser¬ 
tion  in  the  release  that  RIM  used  “lobbyists 
and  political  connections  to  exert  politi¬ 
cal  influence  to  have  the  [U.S.  Patent 
Office]  re-examine  NTP’s  patents.” 


The  company  says  the  documents, 
which  have  not  been  made  available  pub¬ 
licly,  reveal  that  there  were  previously 
undisclosed  communications  between 
RIM’s  lobbyists  and  the  Patent  Office.  One 
of  the  lobbyists,  NTP  says,  is  former  PTO 
official  David  Stewart.  The  statement  also 
says  the  Canadian  embassy  “sought  to  find 
a  means”  for  the  Canadian  government  to 
“exert  pressure”on  the  Patent  Office.  RIM  is 
headquartered  in  Canada. 

NTP  also  says  documents  reveal  that, 
after  losing  its  appeal  in  the  U.S.  Circuit 
Court  of  Appeals,  RIM  had  undisclosed 
meetings  with  Patent  Office  officials  even 
though  the  office’s  regulations  “expressly 
forbid  such  meetings.”  The  statement 
asserts  that  requesting  a  patent  re-exami¬ 
nation  after  losing  a  jury  verdict  is  “plainly 
prohibited”  by  U.S.  law,  namely  the  U.S. 
Patent  Act,  Section  317  in  Title  35  of  the 
United  States  Code. 

NTP’s  public  relations  agency  did  not 
respond  by  press  time  to  a  request  for 
copies  of  these  documents.  ■ 
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Microsoft  unveils  latest  Vista  beta 


Deployment  help 

Microsoft  last  week  released  the  first  feature-complete  and 
corporate-focused  beta  of  the  forthcoming  Vista  client 
operating  system.  One  of  its  highlights  was  support  for  new 
and  upgraded  tools  to  ease  deployment  and  maintenance. 


Tool 

Description 

Benefits 

Windows  Automated 
Installation  Kit 

_ 

Includes  imaging, 
deployment  and  data 
migration  tools. 

Reduces  the  number  of  operating 
system  copies,  or  images,  and 
automates  deployment. 

Application 
Compatibility  Toolkit 

Helps  users  test  apps  for 
compatiblity  with  Vista. 

Users  know  what  to  expect  when 
they  fire  up  Vista. 

Business  Desktop 
Deployment 

Offers  guidance  and  best 
practices. 

Should  let  users  create 
repeatable  rollout  practices. 

BY  JOHN  FONTANA 

Microsoft  last  week  highlighted 
the  first  feature-complete  beta  re 
lease  of  its  Vista  client  operating 
system  with  a  new  set  of  deploy¬ 
ment  tools  designed  to  help  cor¬ 
porate  users  more  easily  deploy 
and  maintain  the  desktop  soft¬ 
ware. 

The  Community  Technology 
Preview  (CTP),as  the  Vista  betas 


Ford 

continued  from  page  7 

laborative.” 

The  initial  deployment  covers 
Ford’s  product  development  de¬ 
partment,  which  Lemmer  points 
out  “is  a  user  group  that  is  very 
collaborative.  They  spend  a  lot  of 
time  working  together  and  at  dif¬ 
ferent  locations.  They  are  con¬ 
stantly  on  the  go.” 

These  employee  characteristics 
might  make  a  future  deployment 
worthwhile.  But  before  then,  he 
says,  there  are  technologies,  such 
as  seamless  mobility  that  he  will 
look  at  before  moving  forward. 
Seamless  mobility  also  known  as 
wireless-to-wireline  integration, 
will  make  it  easier  for  business 
users  to  marry  landline  PBX  fea¬ 
tures  such  as  four-digit  dialing 
and  a  single  voice-mail  box  for 
employees  whether  they’re  using 
a  VoIP  wireless  or  traditional 
phone. 

Lemmer  says  he  is  testing  prod¬ 
ucts  from  Cisco  and  products 
through  Sprint,  but  he  does  not 
know  when  he  might  deploy 
these  platforms. 

Other  vendors  in  the  mobile- 
PBX  integration  market  are 
Ascendent  Systems  and  Orative. 
These  vendors’  products  work 
across  a  variety  of  PBXs  and 
mobile  devices.  ■ 

nww.com 

Wireless  event 

Wireless  LANs  &  Enterprise  Mobility  is 
one  of  six  fast  track;  at  IT  Road  Map 
events  coming  to  Boston.  Chicago,  Dallas, 
and  the  Bay  Area.  40  if  all-stars,  ana¬ 
lysts,  and  vendors  offering  new  technol¬ 
ogy  and  best  practices.  Join  us! 
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are  called,  was  the  first  targeted 
specifically  at  corporate  users.  It 
now  includes  the  complete  set  of 
operating  system  deployment 
tools,  including  new  imaging,  dis¬ 
tribution  and  installation  tools. 

“For  Microsoft  to  get  customers 
to  move  onto  the  most  current 
product,  they  have  to  make  migra¬ 
tion  easier  and  have  a  lot  less 
touch  required  on  the  part  of  IT 
managers,”  says  A1  Gillen,  an  ana¬ 
lyst  with  IDC.  He  says  deploy¬ 
ments  of  new  operating  systems 
to  existing  hardware  are  too  hard 
for  users,  who  typically  wait  for 
hardware  refresh  cycles. 

The  CTP  is  the  fourth  release 
since  September.  This  is  the  earli¬ 
est  Microsoft  has  ever  released  a 
feature-complete  beta  in  any 
operating  system  development 
cycle,  and  the  earliest  it  has  made 
deployment  and  installation  tools 
available. Vista  is  expected  to  ship 
|  by  year-end. 

This  February  release  includes 
the  User  State  Migration  Tool  3.0, 
which  has  full  encryption  capabil¬ 
ities  and  unattended  install,  up¬ 
grades  to  the  Microsoft  Manage¬ 
ment  Console  3.0,  enhancements 
to  Group  Pblicyand  event  and  log¬ 
ging  features.  The  beta  also 
includes  a  new  Task  Scheduler 
and  is  the  first  release  of  Vista’s 
Sidebar,  which  lets  users  link  to 
mini-programs  called  gadgets. 

Microsoft  had  planned  to  re¬ 
lease  a  CTP  every  month  starting 
in  September,  but  skipped  Decem¬ 
ber,  pushing  the  release  out  to 
February  as  part  of  what  would 
normally  be  called  Beta  2.  The 
February  CTP  is  expected  to 
reach  500,000  testers  and  is  avail¬ 
able  to  Microsoft  Developer  Net¬ 
work  and  TechNet  subscribers,  as 
well  as  those  in  Microsoft’s  early 
adopter  programs.  The  next  ver¬ 
sion  is  scheduled  to  arrive  before 
the  end  of  June. 

February’s  highlight  is  the  com¬ 
plete  version  of  the  Windows 
Automated  Installation  Kit,  a  col¬ 
lection  of  deployment  tools.  The 
kit  has  been  included  in  previous 
CTPs,  but  containing  only  the 
Xlmage  tool,  which  is  used  to  cap¬ 
ture  and  edit  Windows  Imaging 
Files  (WIM). 

The  February  CTP  adds  the 
System  Image  Manager  and  Win¬ 
dows  Deployment  Services, which 
are  tools  to  create  and  edit  oper¬ 
ating  system  images  and  deploy 


them  to  desktops.  It  also  includes 
Windows  Preinstallation  Environ¬ 
ment  2.0,  a  foundation  tool  for  aid¬ 
ing  in  the  final  deployment  of  the 
operation  system. 

The  tools  also  include  Business 
Desktop  Deployment,  best  prac¬ 
tices  guidance  for  rolling  out 
Vista.  In  April,  Microsoft  is  expect¬ 
ed  to  add  the  Application  Com¬ 
patibility  Toolkit  5.0. 

“If  we  do  really  well  this  time 


around  [with  Vista  tools] ,  then  the 
next  time  people  don’t  blink 
about  deployment,”  says  Manu 
Namboodiri,  senior  product  man¬ 
ager,  Windows  Client  division. 

Deployment  has  proven  to  be  a 
costly  proposition  for  users,  and 
Microsoft  is  feeling  the  heat. 

“We  have  had  customers  spend 
$1,000  per  desktop  to  deploy  the 
operating  system,  and  we  want  to 
come  down  to  the  sub-$lQ0  level,” 


Namboodiri  says.  “We  made  the 
decision  with  Vista  that  we  would 
provide  deployment  tools  as  early 
in  the  process  as  possible.” 

The  vendor  is  hoping  the  de¬ 
ployment  and  installation  tools  let 
users  reduce  the  number  and  size 
of  images,  which  is  designed  to 
make  patching  and  servicing 
more  efficient.  Microsoft  says 
companies  can  spend  upwards  of 
$100,000  creating  and  maintain¬ 
ing  a  single  image. 

The  new  tools  complement  two 
features  of  Vista:  its  modular  de¬ 
sign,  which  simplifies  adding 
optional  components  to  the  oper¬ 
ating  system, and  WlM,a  file-based 
imaging  format  that  replaces  the 
less  flexible  sector-based  imaging. 

Despite  being  feature-complete, 
company  officials  say  Vista  could 
still  be  subject  to  some  gyrations. 

“We  still  take  feedback,  and 
there  are  still  design  change  re¬ 
quests  that  are  put  in,  and  it  is  pos¬ 
sible  to  see  some  features  come 
and  go,”  says  Mike  Burk,  product 
manager  in  the  Wndows  Client 
division.  ■ 


Confab  to  examine  security  of 
utility,  other  control  systems 


BY  CARA  GARRETSON 

Professionals  concerned  with  securing  the  systems 
that  run  water  and  electric  utilities,  dams,  railways 
and  other  critical  infrastructures  are  gathering  this 
week  in  Florida  to  understand  better  the  challenges 
facing  them  and  learn  how  to  defend  their  systems. 

Called  the  Process  Control  and  SCADA  (supervi¬ 
sory  control  and  data  acquisition)  Security  Summit, 
the  event  is  hosted  by  The  SANS  Institute,  is  paid  for 
by  the  Departments  of  Energy  and  Homeland 
Security  and  targets  professionals  involved  with  auto¬ 
mated  industrial  control  systems. 

These  systems  are  fundamentally  different  from  IT 
networks  because,  instead  of  being  focused  on  stor¬ 
ing,  sharing  and  securing  data,  they  are  designed  to 
maximize  the  availability  and  reliability  of  the  rail¬ 
road  or  energy  plants  they  run,  says  Rob  Hoffman, 
manager  of  the  cybersecurity  research  department 
at  the  Department  of  Energy’s  Idaho  National 
Laboratory  who  spoke  during  a  Webcast  last  week 
about  the  conference. 

As  organizations  begin  linking  these  control  sys¬ 
tems  to  their  IT  networks,  however,  they  are  opening 
the  systems  to  the  same  types  of  security  threats  suf¬ 
fered  by  data-centric  systems,  Hoffman  says. 

“[SCADA]  systems  are  generally  stand-alone  and 
were  built  to  meet  one  need:  automation,”  he  says. 


“They’re  only  being  connected  to  back-end  corpo¬ 
rate  [networks]  after  they’ve  already  been  deployed, 
so  security  is  at  best  an  add-on, and  quite  often  never 

designed  in.” 

For  example,  an  organization  running  a  control  sys¬ 
tem  linked  to  its  IT  system  running  Windows  NT  has 
its  control  system  open  to  all  the  vulnerabilities 
found  in  Microsoft’s  operating  system,  Hoffman  says. 

Compounding  the  issue  is  that  control  systems  are 
difficult  to  patch,  Hoffman  says.  “Downtime  is  not 
scheduled  every  week  from  1  to  4  a.m.,so  it  makes  it 
very  difficult  to  respond  in  a  rapid  fashion  with 
patches  to  the  vulnerabilities.” 

In  addition,  many  SCADA  systems  are  the  targets  of 
not  just  hackers  but  terrorists  or  even  nation  states, 
Hoffman  adds.  He  defines  five  types  of  potential 
SCADA  system  attackers:  recreational  hackers  look¬ 
ing  for  a  challenge;  disgruntled  engineers;  activists 
with  environmental  or  business  concerns;  terrorists; 
and  nation  states  that  want  to  access  a  control 
device  and  stay  resident  in  case  of  future  need. 

“The  thing  that  keeps  me  up  at  night  is  a  bad  guy 
who  understands  pressure  volume  and  temperature 
relationships  knowing  the  right  valves  and  pumps  to 
operate  and  is  able  to  operate  them,”  says  a  security 
professional  at  a  large  energy  company  who  asked 
not  to  be  named.  ■ 
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Verio  airs 
Windows 
hosting 
services 

BY  ELIZABETH  MONTALBANO, 

IDG  NEWS  SERVICE 

Verio  last  week  introduced  six 
hosted-service  plans  for  Micro¬ 
soft’s  Windows  Server  platform 
that  are  designed  to  provide 
more  options  and  cost-effective 
services  to  small  and  midsize 
businesses,  the  company  says. 

The  company  offers  several 
plans  that  let  customers  pur¬ 
chase  multiple  sites  running  on 
Windows  2003  servers. 
Customers  can  hand  off  the 
administration,  security  and 
content-creation  duties  of  each 
site  to  other  parties  or  sub¬ 
accounts,  says  Bill  Thomson, 
director  of  product  manage¬ 
ment  for  shared  hosting  at  Verio. 
Previously,  the  company  had 
only  one  plan,  which  let  cus¬ 
tomers  host  multiple  sites,  but 
on  just  one  account. 

To  illustrate  the  new  plans’ 
cost-effectiveness, Thomson  says 
the  company’s  former  Hosting 
4000  plan  offered  25  Web  sites 
for  $49.95  a  month.  Now,  the 
MultiSite  plan  includes  10  Web 
sites  and  costs  $24.95  a  month, 
and  the  WebMaster  Plan 
includes  30  Web  sites  and  costs 
$59.95  a  month. 

The  other  plans  Verio 
launched  last  week  are  the 
Windows  eStoreFront  Plan, 
which  offers  basic  e-commerce 
and  shopping  cart  functionality 
for  two  separate  sites  for  $24.95 
a  month,  and  the  Windows  SQL 
Plan,  which  is  aimed  at  compa¬ 
nies  that  want  to  link  a  Microsoft 
SQL  Server  database  to  their 
Web  sites.  The  Windows  SQL 
Plan  includes  two  Web  sites  and 
costs  $29.95  a  month. 

The  new  plans  are  especially 
helpful  for  Web  site  developers 
who  use  Verio’s  hosted  services 
to  build  sites  for  customers, 
Thomson  says.  Ultimately  they 
can  control  the  customer 
account  with  Verio,  but  can  pass 
off  the  administration  of  various 
sites  to  their  customers.* 
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S0A  vendors  ready  new  wares 


SOA  assistance 


Software  AG  and  Sonic  Software  are  adding  to  their 
respective  portfolios  of  SOA-focused  management  and 
deployment  products. 


Vendor: 

Software  AG 

Product: 

Crossvision 

Key  features: 

•  Bundles  tools  for  composing  applications  and  services,  coordinating 
business  processes  and  integrating  systems. 

•  Has  built-in  registry  and  repository  for  managing  SOA  services, 
policies  and  processes. 

•  Integrates  with  third-party  products  including  Forum  Systems' 
Web  services  security  software. 

Vendor: 

Sonic  Software 

Product: 

Actional  6.0 

Key  features: 

•  Tools  for  mapping  the  infrastructure,  applications  and  services 
that  support  business  processes. 

•  Monitoring  features  that  alert  users  to  designated  business  events. 

•  Security  features  for  locking  down  an  entire  business  process 
and  preventing  unauthorized  use  of  services. 

BY  ANN  BEDNARZ 
AND  JOHN  FONTANA 

Two  vendors  are  expected  to  un¬ 
veil  products  this  week  that  cus¬ 
tomers  say  will  help  them  tap 
their  legacy  assets  more  effi¬ 
ciently  in  a  service-oriented  archi¬ 
tecture  environment. 

Software  AG  is  preparing  to  re¬ 
lease  Crossvision, a  suite  designed 
to  help  companies  deploy  and 
manage  application  services. 
Crossvision  combines  manage¬ 
ment  features  with  tools  for  inte¬ 
grating  applications,  building 
composite  applications  and  mod¬ 
eling  business  processes. 

For  its  part,  Sonic  Software  is 
expected  to  take  the  wraps  off 
Actional  6.0,  its  SOA  management 
platform  due  to  ship  in  early 
March. Actional  6.0  will  be  the  first 
platform  upgrade  since  Progress 
Software  —  Sonic’s  parent  com¬ 
pany  —  acquired  Web  services 
management  vendor  Actional  for 
$32  million  earlier  this  year  and 
folded  the  purchase  into  Sonic. 

Sonic  has  added  features  it  calls 
Business  Process  Visibility  that 


give  business  users  and  IT  staff  in¬ 
sight  into  the  services  infrastruc¬ 
tures  that  support  business  pro¬ 
cesses.  The  tools  let  users  write, 
apply  and  enforce  policies  for 
those  processes.  In  addition,  the 
software  can  auto-discover  the  in¬ 
frastructure,  applications  and  ser¬ 
vices  supporting  a  business  pro¬ 
cess  and  create  a  flow  map  aimed 
at  faster  detection  and  resolution 
of  problems. 

Newly  added  activity-monitor¬ 
ing  tools  can  be  tuned  for  busi¬ 
ness  users  looking  for  data  such 
as  units  shipped,  and  for  IT  users 
seeking  operational  data  such  as 
service  response  time. 

“Actional  allows  us  to  monitor 
and  centrally  manage  all  the 
actions  on  our  service  fabric,” says 
Israel  del  Rio,  senior  vice  presi¬ 
dent  of  technology  solutions  for 
the  800-property  Starwood  Hotels 
&  Resorts  Worldwide.  The  White 
Plains,  N.Y,  company  is  four  years 
into  a  project  to  move  its  main¬ 
frame-based  reservation,  booking 
and  inventory  system  to  a  services 
architecture.“With  Actional  we  are 


able  to  find  out  what  type  of  ser¬ 
vice  calls  were  being  made  and 
what  is  the  service  response  we 
are  getting,”  says  del  Rio,  who  is 
beta  testing  Version  6.0. 

Tap  into  mainframe  systems 

American  Fidelity  Assurance 
Company  a  longtime  Software  AG 
customer,  also  is  using  SOA  tech¬ 
nology  to  build  business  applica¬ 
tions  that  tap  into  its  core  main¬ 
frame  systems. 

The  insurance  company  has 
built  services-based  applications 
that  automate  the  process  of  issu¬ 
ing  policies,  as  well  as  customer¬ 
facing  Web  applications  that  use 
services  to  link  to  mainframe 
databases  for  executing  requests 
such  as  a  balance  look-up  or 
claims  presentation. 

American  Fidelity  uses  Software 
AG’s  legacy  integration  software 
and  XML  database,  as  well  as  its 
mainframe  programming  lan¬ 
guage  and  database  management 
software.  The  bundling  in  Cross¬ 
vision  will  create  closer  ties 
among  the  products  and  stream¬ 
line  the  process  of  working  with 
Web  services,  says  Jim  Lupton, 
vice  president  of  IS  at  the  Okla¬ 
homa  City  company 

“We  had  a  lot  of  the  pieces 
already,  but  they  were  all  sepa¬ 
rate,”  Lupton  says.“We  didn’t  really 
have  the  architecture  to  make 
them  work  together  without 
building  it  ourselves.” 

Lupton  expects  American  Fidel¬ 


ity  will  be  able  to  achieve  greater 
reuse  of  the  services  it  builds.  “In 
the  past,  what  we  were  putting  to¬ 
gether  was  probably  not  tremen¬ 
dously  reusable’’  he  says.  For  ex¬ 
ample,  some  services  didn’t  make 
use  of  the  Web  Services  Descrip¬ 
tion  Language  (WSDL)  specifica¬ 
tion,  which  provides  a  common 
way  to  describe  services  and  the 
format  for  service  requests.  The 
Crossvision  components  will 
make  it  easier  to  use  WSDL  and 
avert  some  of  the  steps  required 
to  expose  a  service  today 

Revamped  software  from  Soft¬ 
ware  AG,  Sonic  and  other  vendors 
shows  the  market  for  more 
mature  SOA  products  is  growing, 
says  Ron  Schmelzer,  a  senior  ana¬ 
lyst  at  ZapThink.“We’re  now  at  the 
point  where  the  vendors  have 
consolidated  to  a  certain  degree, 
the  different  markets  have  coa¬ 
lesced,  and  the  standards  are  rela¬ 
tively  mature,  so  the  products  are 
becoming  more  mature." 

Among  users,  SOA  is  seen  as 
a  less  risky  technology  than  it  was 
in  the  past,  he  adds.  Companies 
are  looking  beyond  simply  ap¬ 
plying  services  interfaces  to  sys¬ 
tems  and  thinking  about  how  to 
build  proper  services  atop  a  well- 
conceived  runtime  infrastructure. 
“We’re  seeing  a  lot  more  compa¬ 
nies  really  starting  to  take  a  look 
at  planning  —  planning  which 
services  to  build  and  how  to 
build  them  in  a  secured,  gov¬ 
erned,  reliable  way?* 


San  Francisco 
heads  to  city  Wi-Fi 

BY  JOHN  COX 

San  Francisco  has  become  the  latest  major  city  to  take  a  step  toward 
a  municipal  Wi-Fi  network. 

Last  week,  the  city  accepted  six  vendor  proposals  to  build  a  wireless 
mesh  to  blanket  the  hilly  community  and  provide  “universal,  afford¬ 
able”  Internet  access. 

In  a  statement,  San  Francisco  Mayor  Gavin  Newsom  said  that  such 
“access  to  information  is  a  fundamental  government  service,  akin  to 
libraries  or  public  schools.” 

The  planned  Wi-Fi  network  is  part  of  the  city’s  TechConnect  project, 
which  includes  low-cost  computer  and  network  hardware,  training  and 
other  services  to  spread  acceptance  and  use  of  broadband  access. 

The  proposals  came  from  Communication  Bridge  Global;  EarthLink 
and  Google;  MetroFi;  NextWLAN;  Razortooth  Communications;  and  SF 
Metro  Connect,  which  is  a  joint  effort  by  SeaKay, Cisco  and  IBM. 

EarthLink,  which  is  aggressively  pursuing  municipal  wireless  network 
contracts,  announced  its  partnership  last  week  with  Google.  EarthLink 
is  interested  in  fee-based  Wi-Fi  services;  Google  earlier  had  offered  to 
install  a  city  wireless  network  for  Internet  access  that  would  be  free  to 
city  users.Together.the  two  companies  are  proposing  an  advertiser-paid 
basic  Internet  service;  a  higher-speed  Internet  service  would  be  avail¬ 
able  for  about  $20  per  month. 

A  city  review  panel  will  analyze  the  proposals  and  make  its  recom¬ 
mendations  in  early  April.  Deployment  could  begin  soon  after  the  city 
finalizes  a  contract  with  the  winning  bidder. 

San  Francisco  is  part  of  a  growing  list  of  municipalities  looking  to 
offer  public  Wi-Fi  systems,  including  Boston,  Chicago,  Miami,  Minne¬ 
apolis  and  Philadelphia.* 
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Vegas  water  district  mixes  wireless,  maps 
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BY  PHIL  HOCHMUTH 

ow  do  you  measure 
more  than  3,000  miles  of 
i  water  pipes  buried  in  the 
desert?  The  Las  Vegas  Valley 
Water  District  looks  to  the  skies 
for  help. 

In  supplying  water  to  more 
than  1.5  million  people,  the 
LVVWD  operates  3,600  miles  of 
pipes  and  tens  of  thousands  of 
valves,  hydrants,  meters  and 
other  equipment.  To  maintain 
and  manage  it,  the  water  dis¬ 
trict  uses  a  database  of  more 
than  100,000  digital  engineer¬ 
ing  records  and  drawings  —  a 
document  store  that  grows 
steadily  each  year  as  new  con¬ 
struction  proliferates  in  the  Las 
Vegas  Valley 

A  year  ago,  the  LWWD  began 
looking  at  technologies  to  col¬ 
lect  more  accurate  data  from 
the  field,  as  well  as  better  ways 
for  its  employees  in  the  field  to 
use  its  data  center’s  assets.  The 
new  network  is  a  sort  of  mash- 
up:  It  melds  cellular,  wireless 
broadband  network  connectiv¬ 
ity  GPS  satellite  data  collection, 
and  geographic  information  system  (GIS) 
mapping  and  location  tracking  technolo- 
gies.The  results  are  clear:  More  work  com¬ 
pleted  in  less  time  with  no  increase  in 
staff. 

“There  was  a  three-year  backlog  that 
was  just  piling  up”  in  terms  of  creating 
new  blueprints,  and  verifying  the  accura¬ 
cy  of  existing  maps  and  engineering  doc¬ 
uments, says  Jonathan  Pickus,  manager  of 
the  water  district’s  GIS  Division. 

“The  whole  organization  was  relying  on 
our  data,  and  it  wasn’t  very  good  at  the 
time,”  he  says.“We  had  to  figure  out  a  way 
to  automate  all  of  our  processes,  so  that 
data  is  put  into  systems  correctly  Our  goal 
was  to  enter  data  once,  then  propagate 
that  to  all  of  our  products.” 

These  products  include  internally 
developed  applications  for  verifying 
pipeline  blueprints  and  GIS-based  map¬ 
ping  software  that  lets  work  crews 
quickly  find  exact  locations  of  under¬ 
ground  pipes  and  valves.  Paper 
schematics  and  rolled-up  blueprints  are 
going  away. 

Field  inspectors  use  Trimble  Navigation 
surveying  gear, which  pinpoints  and  mea¬ 
sures  the  district’s  assets  via  GPS  satellites. 


Water,  water  everywhere 


The  Las  Vegas  Valley  Water  District  employs  a  GIS  that  uses  a  mix  of  wireless,  Internet  and  design 
software  to  efficiently  create  precise  blueprints  and  maps  of  water  pipes,  pumps,  valves  and 
other  equipment. 


Data  center 

Web-based  GIS  data 
collection  server 


Foundry  LAN  switch 
fnnnnnnnlj^ 


□ 


Bluetooth- 
enabled  cell 
phone 


IBM  servers  running  VMware  plus 
Windows/Oracle  database  software 


Field  engineers  measure  a  length  of  water  pipe  by  recording  two  coordinates  in  a  GPS-enabled  data  collection  device. 


A  Bluetooth  link  ties  the  data  collection  device  to  a  cell  phone,  which  is  used  to  send  the  data  via  IP  over  the  Internet  to  the 
LVVWD  main  office. _ 

A  Web-based  GIS  data  collection  server  listens  for  incoming  data  from  the  field,  formats  the  data  and  uploads  it  to  a 
Windows/Oracle  server  in  the  data  center. _ 

Maps  are  generated  automatically  using  the  GPS  field-collected  data  in  AutoCAD  drafting  software.  A  Gigabit  Ethernet 
backbone  is  used  in  the  data  center  to  support  the  high-resolution  image  traffic. 


More  than  70,000  high-resolution  maps  and  schematics  are  available  to  engineers  in  the  field  with  laptops  and  Bluetooth 
cell  phones.  Maps  in  the  Oracle  database  are  accessed  via  the  cellular/IP  network. 


Data  collected  is  pushed  to  base  stations 
deployed  throughout  the  Las  Vegas  area. 
These  devices,  each  tied  down  to  a  fixed 
location,  accept  data  from  collectors  and 
relay  measurements  back  to  the  main 
office.  Data  is  sent  among  the  base  col¬ 
lectors  and  base  stations  on  private-band 
AM/FM  radio  waves.  The  water  district  is 
also  moving  some  of  its  base  stations  to 
IP/cellular  technology  that  will  allow  for 
fewer  base  station  points.  Base  stations 
communicate  directly  to  the  main  office 
via  IP-over-cellular. 

To  collect  the  field  data,  an  Apache  Web 
server  sits  in  the  district’s  Internet  DMZ,  lis¬ 
tening  for  the  field  base  stations  on  cer¬ 
tain  ports. 

“No  data  actually  sits  on  this  server,” 
Pickus  says.  “If  the  server  gets  compro¬ 
mised,  we  don’t  lose  any  data.” 

Redlining,  minus  the  red  pen 

In  the  past,  inspectors  working  with 
construction  companies  would  have  to 
verify  water-main  and  piping  blueprints 
by  measuring  the  physical  structures  in 
the  field,  then  drawing  corrections  on  a 
printed  map  in  red  pen,  or  redlining. 
Often,  inspectors  had  only  one  chance  at 


measuring  and  getting  the  corrections  on 
paper  before  pipes  were  buried  or  sealed 
behind  concrete. 

“That  takes  the  inspectors  several  hours 
to  do,  and  often  there  are  mistakes," 
Pickus  says.  “By  the  time  the  pipes  are 
buried,  those  mistakes  get  into  the  data¬ 
base.” 

Engineers  and  inspectors  in  the  field 
now  do  redlining  without  drawing  a  line 
on  paper.  The  GPS  surveying  devices 
measure  the  distance  and  locations  of 
pipes,  fittings  and  valves.  Three  thousand 
to  4,000  measurements  per  month  are 
collected  and  sent  to  the  water  district’s 
data  center,  where  data  is  stored  in  an 
Oracle  database. 

The  GIS  database  also  generates  as-built 
documents,  which  are  the  official  records 
kept  by  the  district  and  the  county  on 
construction  projects.  It  sometimes  took 
weeks  to  collect  redlined  documents 
from  inspectors,  reenter  the  changes  into 
software  and  print  the  as-builts,  Pickus 
says.  Now  CAD  engineers  generate  most 
of  the  as-builts  automatically  in  an  hour, 
with  some  small  cleanups. 

Large  pipes  inside  the  data  center  and 
LAN  also  help  engineers  and  designers 


work  faster.  A  Gigabit  Ethernet 
network,  built  on  Foundry 
Networks  switches,  connects 
CAD  engineers  to  the  GIS 
database  and  other  servers 
where  large  maps,  blueprints 
and  other  image  files  are  gen¬ 
erated  and  accessed  from 
workstations. 

GIS  on  the  road 

The  LWWD  also  is  combin¬ 
ing  its  GIS  data  with  its  map¬ 
ping  software  system,  its  site- 
inspection  ticket  request  sys¬ 
tem  and  others.  The  result  is 
similar  to  popular  Web-based 
mash-ups  that  combine  data¬ 
base,  GIS  data  and  mapping 
software  (such  as  marrying  a 
directory  of  pizza  places  with 
Google  Maps). 

Most  construction  projects 
in  the  Las  Vegas  Valley 
require  a  call  to  the  water 
district  to  ensure  that  a  back- 
hoe  blade  doesn’t  cut  a 
water  main.  Previously,  con¬ 
struction  companies  called 
into  an  automated  phone 
system,  which  generated  e- 
mail  messages  detailing  requests  and 
their  locations.  District  dispatchers 
printed  these  e-mails  and  put  them  in 
folders,  which  were  picked  up  by 
inspectors  who  went  out  to  mark  up 
water  main  locations. 

Using  Oracle  database  tools  and  some 
of  the  water  district’s  own  code,  program¬ 
mers  have  written  a  Java-based  applica¬ 
tion  that  ties  together  the  e-mail  tickets 
and  the  master  GIS  database.  Instead  of 
picking  up  folders  of  printed  e-mails, 
inspectors  use  laptops  in  the  field  with 
Verizon  EV-DO  wireless  broadband  cards. 
Over  a  VPN  connection,  inspectors 
access  the  construction  ticket-request 
application,  which  shows  all  of  the  day’s 
tickets  on  a  map;  details  of  each  job  are 
available  with  a  mouse  click.  Repair 
crews  and  other  field  workers  have  simi¬ 
lar  applications  for  accessing  pipe  and 
valve  location  data  along  with  work-order 
data  in  one  view. 

“This  will  tell  you  exactly  where  to  go  to 
find  a  buried  valve,”  Pickus  says. 

Pickus  says  this  system  let  inspectors 
process  60,000  tickets  last  year,  previously 
the  same  six-  to  seven-person  team  was 
handling  around  40,000  tickets  per  year.  ■ 


a 
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Proofpoint  gets  tougher  against  spam,  viruses 


BY  CARA  GARRETSON 

E-mail  security  vendor  Proof- 
point  is  upgrading  the  core  of  its 
gateway  software  and  appliance 
with  additional  spam  and  directo¬ 
ry  harvest-attack  prevention,  and 
is  adding  a  module  to  help  catch 
viruses  during  the  first  few  hours 
of  an  outbreak. 

With  Proofpoint  Protection 
Server  4.0  software  and  the  Proof- 
point  Messaging  Security  Gateway 
4.0  appliance,  both  slated  for 
release  this  week,  the  company  is 
responding  to  what  it  says  is  a  sig¬ 
nificant  increase  in  directory  har¬ 
vest  attacks,  says  Andres  Kohn, 
vice  president  of  product  man¬ 
agement. 

In  these  attacks, spammers  flood 
a  recipient’s  mail  server  with  mes¬ 
sages  addressed  to  made-up  e- 
mail  names,  to  which  the  mail 
server  will  respond  saying  the  e- 
mail  addresses  are  invalid.  When¬ 


ever  spammers  don’t  receive 
bounce-back  messages,  they 
know  the  addresses  are  valid,  and 
they  spam  away. 

Directory  harvest  attacks  also 
cause  spikes  in  mail  flow  that  can 
tax  mail  servers,  Kohn  says.  Ver¬ 
sion  4.0  helps  prevent  these 
attacks  by  blocking  or  throttling 
back  messages  coming  from  an  IP 
address  that  has  hit  a  preset 
threshold  in  the  number  of  mes¬ 
sages  sent  to  invalid  addresses.  So 
if,  for  example,  a  sender  attempts 
to  send  messages  to  20  invalid  ad¬ 
dresses,  Proofpoint  will  block  any 
further  attempts  to  send  mail. 

One  analyst  doesn’t  necessarily 
agree  that  directory  harvest 
attacks  —  or  dictionary  attacks  — 
are  on  the  rise,  but  concurs  that 
they  can  cause  headaches  and 
enterprises  should  look  to  their 
anti-spam  suppliers  to  help  block 
them. 


“There’s  a  lot  of  good  that  comes 
from  having  your  anti-spam  [pro¬ 
duct]  detect  dictionary  attacks, 
which  can  fill  up  your  mail  serv¬ 
er’s  hard  drive  and  crash  your 
server]’ says  Daniel  Golding, senior 
analyst  at  Burton  Group. 

Other  enhancements  in  Version 
4.0  include  the  ability  to  detect 
spam  messages  written  in  double¬ 
byte  languages  such  as  Japanese 
and  Chinese.The  new  version  also 
blocks  e-mails  with  embedded 
URLs  that  are  associated  with 
phishing  or  spyware  sites,  Kohn 
says. 

In  this  release,  the  company  has 
enhanced  outbound  e-mail  scan¬ 
ning  features  with  a  quick-inspec¬ 
tion  view  that  lets  non-technical 
users  quickly  check  if  employees 
are  violating  corporate  rules  or 
government  regulations  regarding 
what  can  and  cannot  be  e-mailed 
outside  the  company 


It  also  includes  customizable 
smart  identifiers  that  let  users 
scan  outbound  mail  for  patterns 
characteristic  of  certain  types  of 
information,  such  as  16-digit  cred¬ 
it  card  numbers,  Kohn  says.  Com¬ 
panies  can  customize  this  feature 
to  work  with  information  types 
specific  to  their  company  such  as 
customer  account  numbers  or 
billing  codes,  he  says. 

Proofpoint’s  Zero-Hour  Anti- 
Virus  module,  which  was  an¬ 
nounced  last  fall  and  is  also  avail¬ 
able  this  week,  aims  to  protect 
organizations  from  malicious 
code  during  the  crucial  period 
after  a  virus  has  been  released  but 
before  signatures  are  available, 
Kohn  says. 

The  module  filters  incoming  e- 
mail  for  clues  of  virus  outbreaks, 
such  as  a  spike  of  identical  e- 
mails  sent  with  attachments.  Sus¬ 
picious  messages  are  quarantined 


at  the  organization’s  gateway  until 
anti-virus  companies  release  sig¬ 
natures  to  identify  and  block 
them. 

These  types  of  zero-hour  anti¬ 
virus  filters  are  also  available 
from  Proofpoint  competitors,  in¬ 
cluding  IronPort.CipherTrust  and 
Symantec. 

Proofpoint  Protection  Server  4.0 
software  is  priced  per  module;  the 
anti-spam  module  starts  at  $4,000 
per  year,  depending  on  volume. 
The  Proofpoint  Messaging  Secur¬ 
ity  Gateway  4.0  appliance  starts  at 
$6,750,  plus  annual  user  license 
fees.  The  new  Proofpoint  Zero- 
Hour  Anti-Virus  module  is  priced 
starting  at  $2,720  per  year,  depend¬ 
ing  upon  the  number  of  users.  ■ 
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AirlVsagnet  upgrades  WLAN  sensors 


BY  JOHN  COX 

The  latest  version  of  AirMagnet’s 
wireless  intrusion-prevention  pro¬ 
duct  includes  a  new  breed  of 
radio  sensors,  and  the  ability  to 
monitor  and  identify  other  kinds 
of  radio  activity,  not  just  802.11 
packets. 

The  changes  in  AirMagnet 
Enterprise  7.0  make  visible  to  net¬ 
work  administrators  a  larger 
chunk  of  the  radio  spectrum, 
including  portions  for  wireless 
LANs  (WLAN),  Bluetooth  and 
microwave  ovens.  The  company 
says  this  is  the  first  product  to 
combine  WLAN  packet  analysis 
and  radio  spectrum  monitoring. 

The  product  consists  of  com¬ 
pact  radio  sensors  that  look 

WIRELESS  IN 
THE  ENTERPRISE 

Subscribe  to  our  free  newsletter. 

DocFinder: 1028  www.networkworld.com 


almost  identical  to  standard 
WIAN  access  points,  as  well  as 
server  software  and  a  manage¬ 
ment  GUI.  The  sensors  scan  and 
identify  radio  transmissions,  han¬ 
dle  some  preliminary  processing, 
and  feed  data  back  to  the  server 
database  for  analysis  and  display 

Version  7.0  includes  major  hard¬ 
ware  and  software  changes. 

The  new  SmartEdge  sensors  inc¬ 
orporate  the  capability  found  in 
AirMagnet’s  stand-alone  AirMag¬ 
net  Spectrum  Analyzer,  a  CardBus 
notebook  adapter  with  software, 
which  analyzes  the  2.4GHz  to 
2.5GHz  band,  and  parts  of  the 
5GHz  band.  A  similar  product  is 
available  from  Cognio.  In  addition 
to  capturing  WLAN  packets,  the 
SmartEdge  sensors  now  can  col¬ 
lect  information  on  the  radio 
emissions  and  identify  them.  (See 
graphic  for  other  hardware 
changes,  right.) 

AirMagnet  also  is  introducing  its 


first  outdoor  radio  sensor,  housed 
in  a  water-resistant,  rugged  con¬ 
tainer.  It  can  be  used  to  monitor 
WLANs  deployed  outdoors,  or  to 
extend  the  area  that  can  be 
scanned  for  rogue  devices  or 
other  wireless  threats  to  an  enter¬ 
prise. 

On  the  software  side, administra¬ 
tors  now  can  assign  wireless 
devices  in  a  given  area  to  a  group, 
and  then  designate  what  condi¬ 
tions  or  threats  should  trigger 
alarms.  In  effect,  a  user  marks  out 
a  secure  area  and  separately  mon¬ 
itors  all  threats  to  it. 

Another  bit  of  new  code  lets  Air¬ 
Magnet  Enterprise  identify  a  wire¬ 
less  device  that  may  be  causing 
multiple  alarms. The  software  cor¬ 
relates  suspect  events,  groups 
them  and  then  ranks  the  overall 
priority  of  the  threat  posed  by  the 
offending  device.  Previously  the 
GUI  showed  alarms  by  broad  cat¬ 
egory,  such  as  “encryption  and  au¬ 
thentication,”  and  users  clicked 
through  selections  for  specific 
device  details. 

Other  changes  include  support 
for  the  Oracle  database,  which 
now  can  be  used  along  with 
Microsoft  SQL  Server  and  Micro¬ 
soft  Access  as  the  data  repository; 
and  new  compliance  reports, 


Hardware  upgrade 

Among  the  changes  made 

by  AirMagnet  to  its 

wireless  LAN  sensors: 

•  Support  for  Power-over-Ethernet, 
making  deployment  simpler  because 
the  devices  can  draw  their  power 
from  the  nearest  Ethernet  switch. 

•  Removable  antennas,  so  they  can  be 
replaced  with  specialized  antennas  that 
are  more  sensitive  or  more  focused. 

•  Doubling  the  speed  of  the  sensor's 
Intel  IXP  processor  to  533MHz,  and 
the  sensor's  RAM  to  16MB. 

•  Plenum-rating,  which  means  the  sensors 
can  be  installed  in  spaces  used  for 
heating  and  air  conditioning,  such  as 
the  space  above  suspended  ceilings. 


including  one  for  Payment  Card 
Industry  Data  Security  Standard, 
which  governs  the  security  of 
credit  card  data. 

AirMagnet  Enterprise  7.0  is  set 
to  ship  in  March.  Prices  are  un¬ 
changed:  A  starter  kit,  with  four 
sensors,  starts  at  $9, 000. The  con¬ 
ventional  sensors  are  priced  at 
$750  each,  and  the  new  sensors 
with  spectrum  analysis  at 
$2,000.  ■ 
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Nortel  to  reveal 
spending  plans 


BY  JIM  DUFFY 

Nortel  this  week  will  announce  where  it  plans  to  spend  —  and  not 
spend  —  its  $1.9  billion  R&D  budget  for  2006,  CEO  Mike  Zafirovski 
said. 

During  a  Webcast  for  investors,  analysts  and  the  media,  Zafirovski 
said  Nortel  is  in  a  rebuilding  mode  after  five  years  of  downsizing  by 
two-thirds,  restructuring,  restatements  and  accounting  scandals. 

“We’re  probably  at  ground  zero  right  now’’ he  said  on  the  eve  of  his 
first  100  days  as  Nortel  CEO. 

Part  of  that  rebuilding 
includes  focusing  the 
company’s  R&D  on  areas 
where  Nortel  is  strong,  can 
gain  share  and  can  win, 
Zafirovski  said. 

“We  tried  to  be  every¬ 
thing  to  everybody?’  he  said. “We  spent  enormous  amounts  of  money 
on  R&D  but  it’s  not  as  directed  to  . . .  many  of  the  places  where  our 
position  today  is  not  as  strong  as  it  has  to  be.” 

Some  of  Nortel’s  growth  opportunities,  according  to  Zafirovski,  are  in 
Internet  Protocol  Multimedia  Subsystem, WiMAX  and  IPTVHe  also  said 
the  company’s  enterprise  operations,  thought  by  some  observers  to  be 
expendable,  would  play  a  bigger  role. 

“There’s  very  strong  demand  for  a  No.2,”he  said,  referring  to  the  oppor¬ 
tunity  to  be  an  alternative  to  Cisco.  “There’s  a  real  chance  for  us  to  do 
That,  including  how  do  you  bring  enterprise  solutions  working  with  our 
carrier  partners.” 

Separately,  Nortel  has  named  George  Riedel,  former  Juniper  Networks 
strategy  and  business  development  chief,  as  its  chief  strategy  officer, 
which  includes  business  development,  and  mergers  and  acquisitions. 
In  addition,  Riedel  will  focus  on  emerging  technologies,  market  oppor¬ 
tunities  and  strategic  partnerships.* 


“There’s  a  very  strong 
demand  for  a  No.  2.” 

Mike  Zafirovski, Nortel  CEO,  on  the  goal  of 
being  an  alternative  to  Cisco. 


Symantec  to  offer 
security  appliance 

BY  ROBERT  MCMILLAN,  IDG  NEWS  SERVICE 

Symantec  this  week  is  scheduled  to  roll  out  a  line  of  its  Gateway 
Security  appliances  designed  for  small  and  midsize  businesses. 

The  Symantec  Gateway  Security  1600  Series  products  will  use  the 
same  software  as  Symantec’s  enterprise-level  5000  Series  appliances 
but  will  not  have  the  performance  or  hardware  robustness  of  their  high- 
end  counterparts,  says  George  Sluz,  group  product  manager  with 
Symantec. 

The  first  two  models  in  the  product  line  will  be  the  Gateway  Security 
1620  and  1660.  The  1620  will  sell  for  about  $900,  with  a  $500-per-year 
license  fee.  It  will  come  with  three  Ethernet  ports  and  will  support  net¬ 
work  throughput  of  up  to  100Mbps. 

The  Gateway  Security  1660  will  support  200Mbps  throughput  and  will 
ship  with  five  Ethernet  ports.  It  also  will  include  an  encryption  proces¬ 
sor,  which  will  give  it  five  times  the  VPN  performance  of  the  1620. The 
1660  will  be  priced  just  less  than  $2,500  and  will  cost  about  $1,500  per 
year  in  license  fees,  Sluz  says. 

Symantec’s  appliances  are  designed  to  provide  an  extra  level  of  secu¬ 
rity  for  corporate  networks  by  performing  network-wide  security 
checks,  including  firewalling,  anti-virus  protection,  intrusion  prevention 
and  detection,  and  content  filtering. 

Both  of  the  1600  series  machines  also  will  have  anti-spyware  and  anti¬ 
adware  features.  These  capabilities  are  expected  to  be  added  to  the 
5000  series  appliances  in  April.  ■ 
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Hank  not  only  counts  on  the  most  complete,  secure  network  of  the  new  AT&T, 
he  turns  to  the  AT&T  BusinessDirect®  online  command  center  for  answers. 
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A  brief  history  of  MSP  mergers  and  acquisitions 


January  2002 

SevenSpace  absorbs  Nuclio,  a  provider 
of  network,  systems  and  server 
administration  management  services, 

i 


December  2004 

Sun  snaps  up  SevenSpace,  which  offers 
remote  application,  system,  and  network 
device  monitoring  and  management  services. 


August  2005 

MCI  buys  Totality,  a  supplier  of  remote 
application  and  infrastructure 
management  services,  j 
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ffers  managed  security  services, 
nd  incident  management. 

oe|uemut!i  zuuh 

Cisco  buys  NetSolve,  which  delivers  remote  January  2005 

real-time  network  performance  monitoring  with  MCI  acquires  NetSec,  which  o 

diagnosis  and  troubleshooting  services.  including  event  correlation  a 

MSP 

continued  from  page  7 

has  done  more  than  survive  over 
the  past  few  years,  but  not  without 
making  a  few  changes. 

Lyndon  Rive,  co-founder  and 
vice  president  of  Everdream,  says 
as  soon  as  the  company  aban¬ 
doned  being  a  hardware,  software 
and  sendees  provider,  its  business 
benefited. 

“Our  full-service  offering  that  ad¬ 
dressed  the  entire  life  cycle  of  the 
PC  required  a  greenfield  environ¬ 
ment,  which  meant  we  had  to  re¬ 
place  existing  hardware,  and  that 
didn’t  work’’  Rive  explains.  “Now 
we  are  hardware-independent 
and  customers  can  subscribe  to 
just  the  services  they  want,  with  a 
flexible  licensing  model,  which 
puts  a  lot  of  them  at  ease  with 
going  with  an  MSP’’ 

For  example,  Everdream  used  to 
enforce  a  three-year  contract.  Now 
customers  can  sign  on  for  just  one 
year,  which  Rive  says  can  cut 
down  a  budget’s  line  item  from 
$10,000  to  close  to  $3,000.“lt  takes 
the  long-term,  big-budget  commit¬ 
ment  down  for  the  customer.  It 
removes  a  barrier;’  he  says. 

With  the  exception  of  a  few  ser¬ 
vices,  Everdream  places  agents  on 
the  machines  to  be  managed. The 
agents  send  outbound-only  com¬ 
munications  to  Everdream’s  data 
center,  and  from  there  customers 
can  choose  to  have  Everdream 
staff  manage  their  desktop  envi¬ 


ronment  or  to  manage  it  them¬ 
selves  with  Everdream’s  technolo¬ 
gy  in  a  hosted-application  model. 
Rive  also  attributes  the  company’s 
approximately  250  customers  to 
the  nature  of  desktop  manage¬ 
ment. 

“It’s  such  a  mundane  task  that 
doesn’t  add  any  competitive  ad¬ 
vantage  to  a  company  that  it’s  per¬ 
fect  for  managed  services,”  Rive 
says. 

InteQ 

After  signing  two  major  deals  — 
one  with  Exodus  (which  later 
went  bankrupt)  and  one  with 
Compaq  (which  was  acquired  by 
HP)  —  InteQ  had  to  determine 
how  to  endure  what  its  CEO  calls 
“two  very  unfortunate  events”  and 
keep  business  operations  run¬ 
ning.  Despite  having  $72  million 
in  venture  capital  funding  by 
2001,  InteQ  needed  to  adapt  to 
survive. 

Santhana  Krishnan,  CEO  of 
InteQ,  says  getting  his  company 
through  the  lean  years  required 
InteQ  to  up  its  service  offerings 
from  simple  monitoring  to  in- 
depth  management.  About  10 
years  ago,  InteQ  emerged  as  a 
professional  services  firm  and 
systems  integrator  and  branched 
out  around  2000  to  provide  re¬ 
mote  management  services. 
InteQ  supports  a  NOC  and  deliv¬ 
ers  services  to  customers  via 
secure  VPN  connections. 

Krishnan  says  the  company  re¬ 


verted  to  its  beginnings,  focused 
on  enterprise  customers  and  cou¬ 
pled  technology  services  with 
best  practices.  Now  InteQ  services 
are  interlaced  with  Information 
Technology  Infrastructure  Library 
best  practices.  “Our  model  was 
that  customers  maintained  con¬ 
trol.  We  didn’t  claim  to  do  it  all” 
Krishnan  says.  “Now  we  manage 
more  than  50  enterprise  cus¬ 
tomers’  infrastructure  in  20  coun¬ 
tries.  More  customers  are  out¬ 
sourcing  all  of  their  infrastructure 
management.” 

The  company  has  increased  rev¬ 
enue  by  70%  year-over-year  for  the 
past  three  years,  Krishnan  says, 
and  although  it  has  broadened 
what  it  does,  more  than  70%  of 
InteQ’s  business  remains  man¬ 
aged  services.  InteQ  has  expand¬ 
ed  to  support  a  second  service 
company  InteQ  India. 

Krishnan  says  InteQ’s  history  in 


professional  services  helped  it 
maintain  operations  while  man¬ 
aged  services  suffered.  “Start-ups 
five  years  ago  didn’t  focus  on  en¬ 
terprise  accounts,  which  we  had 
already  been  doing,  and  they  did¬ 
n’t  think  through  how  to  address 
anything  other  than  an  e-busi¬ 
ness,”  he  says.  “You  have  to  con¬ 
stantly  prove  that  you  managing 
their  network  is  better,  that  you’re 
reducing  events,  improving  up¬ 
time  and  moving  them  from  reac¬ 
tive  firefighting  mode.” 

SilverBack  Technologies 

When  Dan  Phillips  became  CEO 
of  SilverBack  Technologies  in 
2001,  he  saw  the  opportunity  to 
adapt  its  management-software 
platform  into  simply  software  and 
sell  it  to  other  aspiring  MSPs. 
Phillips,  who  joined  SilverBack 
from  management-software 
maker  Concord  Communications 
(now  part  of  CA),  says  he  found 
SilverBack’s  core  expertise  was 
delivering  software,  not  services. 
Now  SilverBack,  which  brought  in 
about  $38  million  in  four  rounds 
of  venture  funding  by  April  2003, 
sells  its  IT  network-  and  security- 
management  software  platform  to 
emerging  MSPs. 

“We  got  our  costs  and  expenses 
down  early  enough  to  get  through 
some  difficult  years  in  the  mar¬ 
ket,”  Phillips  says.'Tt  took  years  for 
us  to  make  the  transition,  but  it 
was  a  better  market  approach  to 
become  a  software  company  and 
enable  other  companies  like  sys¬ 


tems  integrators,  VARs  and  MSPs 
to  use  our  software  to  deliver  their 
managed  services.” 

With  four  years  of  85%  growth 
year-over-year,  Phillips  credits  the 
company’s  70%  customer  renewal 
rate  with  recent  successes.  Silver- 
Back  doesn’t  sell  its  software  and 
run;  it  works  with  its  105  partners, 
or  customers,  to  develop  their 
MSP  delivery  processes.  Phillips 
dubs  this  a  franchise  model  and 
says  SilverBack  helps  each  com¬ 
pany  change  its  business  model 
to  that  of  an  MSP  building  pricing 
models,  contracts  and  even  mar¬ 
keting  materials. 

SilverBack  developed  its  own 
management-software  platform 
that  covers  network-  and  applica¬ 
tion-monitoring  and  security- 
management  tasks.  Part  of  its  sell¬ 
ing  point,  Phillips  says,  is  that  the 
software  supports  an  architecture 
that  can  work  on  a  one-to-many 
basis,  because  service  providers 
manage  multiple  customer  net¬ 
works.  The  company  competes 
with  BMC  Software,  CA,  HP  and 
IBM  Tivoli. 

Phillips  says  SilverBack  is  work¬ 
ing  to  integrate  its  offerings  further 
with  complementary  services 
from  companies  such  as  Ever¬ 
dream  to  win  customer  dollars 
from  traditional  management 
vendors.  “There  is  an  entire  eco¬ 
system  of  managed  services  that 
are  complementary  to  our  soft¬ 
ware  and  can  be  easily  integrated 
into  an  overall  managed  services 
offering,”  he  says.B 


The  ups  and  downs  of  the  MSP  industty 


The  managed  service  provider  industry  is  on 
an  upswing.  Today  the  MSP  Alliance  has 
about  250  members,  ranging  from  Avaya, 
Electronic  Data  Systems,  HP,  Intel  and  Lucent, 
to  Everdream,  SilverBack  Technologies  and 
other  industry  founders. 

It  was  only  three  years  ago,  however,  that  one  of 
the  alliance’s  predecessors  —  the  MSP  Asso¬ 
ciation  —  dissolved.  That  group  had  launched  in 
2000  with  about  20  founding  companies  and  had 
boosted  its  membership  to  more  than  100  com¬ 
panies  before  its  demise. 

During  the  MSP  Association’s  reign,  upstarts 
garnered  venture  capital  funding  hand  over  fist, 
but  the  cash  didn't  help  many  of  them  endure. 
For  example,  Loudcloud,  which  received  $68  mil¬ 
lion  in  one  round  by  2000,  changed  its  name  to 
Opsware  and  its  business  model  to  automation- 
software  provider  (having  been  an  outsourced- 
hosting  vendor).  SevenSpace  closed  a  $45  mil¬ 
lion  second -round  funding  deal  in  2001  and 
■hortly  after  joined  forces  with  competitors 


StrataSource  and  Nuclio,  only  to  get  acquired 
by  Sun  in  2004. 

Start-ups  that  invested  their  venture  capital  dol¬ 
lars  in  flashy,  showcase  network  operations  cen¬ 
ters  and  cobbled  together  management  tools  or 
depended  too  much  on  dot-com  customers  for 
revenue  “died  on  the  vine,"  says  Jeff  Kaplan, 
managing  director  atThinkStrategles.  "The  MSP 
market  first  suffered  from  exaggerated  hype, 
then  it  was  ahead  of  the  customer  acceptance  of 
out-tasking  IT  management.” 

Established  vendors  from  network  equipment 
makers  to  server  giants  to  carriers  saw  the 
potential  for  the  managed  offerings  and  rolled 
them  into  their  larger  product  portfolios,  partly 
validating  and  partly  decimating  the  market. 
Ovum  Research  predicted  the  market  for  MSP- 
type  services  would  reach  $15  billion  by  2006  but 
foresaw  that  larger  outsourcing  vendors  such  as 
EDS  IBM  Global  Services  and  others  would  win 
the  lion's  share  of  customer  dollars. 

—  Denise  Dubie 


nww.com 

Questions  about  application  acceleration? 

Curious  about  the  different  approaches  to  speeding  up  your  applications?  We've  invited 
Cisco,  Citrix,  Racketeer  and  Silver  Peak  to  discuss  their  approaches.  They'll  be  online 
the  week  of  Feb.  27  to  answer  your  questions  —  and  well  have  a  library  of  links  to 
related  papers.  Send  your  WAN  acceleration  questions  to  agaffiR@nww.CM,  and 
the  vendors  will  start  working  on  answers. 


Small 


Universal  Distributed 
Storage  brings 
enterprise-class  storage 
benefits  to  the  SMB. 

years  large  organiza- 
3  \J  I  tions  have  had  access 
to  storage  technology  that  was 
beyond  the  reach  of  small  and 
midsize  businesses  (SMBs).  But 
with  recent  developments  in  dis¬ 
tributed  storage  solutions,  led  by 
Microsoft  and  an  “ecosystem”  of 
storage  partners,  this  situation  is 
changing. 

Consider  the  case  of  the  Univer¬ 
sity  of  Portland  in  Portland,  Ore., 
a  successful  midsize  organization. 
Until  last  January  its  managers 
were  scrambling  to  keep  up  with 
growth.  And  like  most  midsize 
organizations,  the  managers 
lacked  the  kind  of  resources  avail¬ 
able  to  large  organizations.  This 
was  particularly  the  case  when  it 
came  to  storage  and  information 
management. 

Even  getting  simple  manage¬ 
ment  information  proved  difficult. 
“It  was  hard  to  know  how  much 
storage  capacity  we  were  using. 

We  couldn’t  answer  basic  ques¬ 
tions  about  the  use  of  our  sys¬ 
tems,”  recalled  Bryon  Fessler,  the 
school’s  vice  president  for  infor¬ 
mation  services.  How  could  the 
school  manage  its  IT  infrastruc¬ 
ture  following  the  best  practices  of 
large,  successful  organizations  if 
its  managers  couldn’t  even  get  the 
most  basic  information? 

The  backup  situation  was  even 
worse.  “It  was  difficult  to  do  back¬ 
ups.  We  had  to  back  up  to  multi¬ 


ple  tapes.  We  had  to  back  up  the 
servers  in  groups.  Sometimes  a 
group  was  overlooked,”  Fessler 
said.  It  was  a  catastrophe  just 


waiting  to  happen,  but  luckily  the 
school  never  had  an  emergency 
that  required  it  to  recover  all  of  its 
backed  up  data  fast. 


Storage  with  a  pedigree 

HP  offers  ease  of  use  and  a  clear  path  to 
Exchange  2003  migration. 

When  it  comes  to  helping  companies  get  the  maximum  value  from 
their  technology  investments,  the  two-decade  collaboration  between 
HP  and  Microsoft  continues  to  deliver  what  users  want.  As  the  leading 
systems  integrator  for  Microsoft  Exchange,  HP  has  a  legacy  of  architecting 
Exchange  solutions  that  address  some  of  the  toughest  business  chal¬ 
lenges.  In  fact,  Microsoft  chose  HP  StorageWorks  Enterprise  Virtual  Arrays 
and  HP  ProLiant  Servers  as  the  platforms  on  which  to  run  its  own 
Exchange  infrastructure.  For  small  to  midsize  organizations  with  limited  IT 
resources,  HP  offers  a  proven  methodology  for  consolidating  costly,  multi¬ 
server  Exchange  environments  on  a  money-saving,  single-server  SAN. 

It  is  HP’s  highly  touted  ease  of  installation  and  SAN  tech¬ 
nology  that  attracted  St.  Mary  and  All  Angels  School  in  Aliso 
Viejo,  Calif.,  to  the  HP  StorageWorks  Modular  Storage  Array 
SAN  solution.  Said  Michael  Magaldi,  St.  Mary’s  director  of 
technology,  “[The  SAN]  was  so  easy  to  install  that  it  took  us 
longer  to  unpack  the  SAN  from  the  box  than  it  took  to  actually  install  it.” 

www.hp.com 
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Simple  SANs 

QLogic  automates  the  complexity  out  of  SANs. 

Diverse  as  they  may  be,  most  Global  2000  companies  have  one 
thing  in  common:  The  backbone  of  their  storage  networks  is  forti¬ 
fied  with  controller  chips,  host  bus  adapters  (HBAs),  fabric  switches, 
and  management  software  from  QLogic  Corp.  With  its  product  suite 
and  customer  support  systems,  QLogic  greatly  simplifies  the  complex 
process  of  networking  storage  with  the  industry’s  only  end-to-end  stor¬ 
age  area  network  (SAN)  infrastructure.  QLogic’s  HBAs  offer  best-in- 
class  SAN  performance  and  functionality,  plus  the  convenience  of  a  sin¬ 
gle  driver  per  OS  for  all  2Gb  and  4Gb  HBAs. 

Also,  working  closely  with  Microsoft,  QLogic  identified  more  than 
too  complex  procedural  items  in  designing  and  installing  a  SAN,  and 
now  has  incorporated  these  items  into  a  GUI 
that  significantly  automates  the  entire  process 
and  delivers  rapid  ROI.  This  SAN  design  and 
installation  automation  from  QLogic  has  opened 
up  the  benefits  of  SAN  technology  to  scores  of 
smaller  businesses  longing  for  the  SAN  benefits 
previously  reserved  for  bigger  companies. 

www.qlogic.com 
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Reversal  in  fortunes 

Today,  the  situation  is  completely 
different  at  the  university.  Working 
from  a  strategic  plan  the  school 
developed  late  in  2004  as  a  cata¬ 
lyst,  the  information  services 
group  embarked  on  an  initiative  to 
upgrade  its  IT  infrastructure  and 
adopt  best  practices.  By  January 
2005,  it  had  installed  clean,  reli¬ 
able,  uninterruptible  power; 
upgraded  to  Hewlett-Packard  (HP) 
blade  servers  running  Windows; 
and  installed  its  first  storage  area 
network  (SAN),  which  it  acquired 
from  LeftHand  Networks. 

In  the  process,  the  school 
gained  many  of  the  advanced  stor¬ 
age  management  features  that 
large  organizations  had  been 
using  for  years  to  maximize  their 
storage  and  systems  investments 
and  protect  their  valuable,  critical 
data  assets.  Now  the  school  can 
make  frequent,  fast  copies  (snap¬ 
shots)  of  critical  data  to  ensure  the 
data  can  always  be  recovered 
quickly.  It  also  can  send  copies  of 
the  data  over  the  wide  area  net¬ 
work  to  a  secure  offsite  location. 
“That  lets  us  get  out  of  the  tape 


backup  business  for  our  critical 
data,”  which  is  a  great  relief, 
Fessler  said. 

Adding  to  Fessler’s  relief,  the 
school’s  lead  vendors  in  this 


effort,  LeftHand  Networks  and  HP, 
turned  out  to  be  partners  with 
Microsoft.  "That  LeftHand 
Networks  was  partnering  with 
Microsoft  was  important  to  us.  We 


The  power  of  many 


With  the  UDS  vision,  Microsoft  has  focused  on  its 
core  strength — software— while  relying  on  lead¬ 
ing  storage  industry  vendors  to  provide  storage-specif¬ 
ic  products  built  on  the  Windows  platform.  Some  of 
Microsoft’s  leading  storage  partners  include  Brocade, 
Emulex,  EqualLogic,  Hewlett-Packard,  Hitachi  Data 
Systems,  LeftHand  Networks,  NSI  Software,  and 
QLogic.  These  partners  are  collaborating  with 
Microsoft  to  advance  SAN  simplification  for  users  of 
Windows  Server  2003  R2  by  ensuring  interoperability 
with  the  storage  capabilities  built  into  the  Windows 
platform.  Microsoft  is  working  with  storage  system 
vendors  to  simplify  hardware  setup  under  the 
UDS  banner. 

“Microsoft  has  done  a  great  job  from  the  operating 


system 
standpoint 
by  providing 
integration 

points.  We  can  now  enable  features  Microsoft  makes 
available  in  specific  products  knowing  they  will  work 
correctly,”  said  Ralph  Lobato,  HP’s  Microsoft  alliance 
manager  for  StorageWorks. 

"UDS  is  a  guiding  vision  that  provides  a  framework 
for  managing  distributed  data.  It  is  about  how 
Microsoft  as  a  platform  can  manage  all  data.  The  SAN 
is  just  one  element.  Our  role  is  to  ease  the  manage¬ 
ment,  to  ease  the  configuration,  to  ease  replication. 
We  simplify  the  interface,”  according  to  an  Emulex 
spokesperson. 


2Gb  SAN  Express™ 
Starter  Kit  1000 

Now  SANs  are  for  everyone! 


Everything  you  need  to  get  a  SAN  up 
and  running  is  included  in  the  QLogic® 
SAN  Express  Kit. 

Easy  to  buy  -  with  fully-tested 
and  interoperable  components  all 
pre-packaged 


Turnkey  Storage  Area  Network 


Easy  to  manage  -  across  the 
SAN  from  a  central  console 

Easy  decision  -  at  just  $3295 


$3295.00  MSRP 


visit  www.qlogic.com 


SIMPLE  LOW  COST  SANS 

QLOGIC 
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“Networked  storage  enables 
SMBs  to  have  all  the  benefits  large 
enterprises  get.  ” 

— Steve  Duplessie,  Senior  Analyst,  Enterprise  Strategy  Croup 


use  a  lot  of  Microsoft  technology,” 
he  said.  The  fact  that  his  primary 
storage  and  server  vendors  were 
working  closely  with  Microsoft  in  a 
strategic  vision  now  called 
Universal  Distributed  Storage 
(UDS)  gave  him  added  assurance 
that  the  technology  decisions  they 
had  made  were  correct  and  would 
continue  to  be  the  best  choices 
going  forward.  And  the  school 
could  do  it  at  a  price — $50,000  for 
8TB  of  storage — that  a  midsize 
organization  like  the  University  of 
Portland  could  handle. 

Advanced  storage  for  the 
smaller  businesses 

In  other  words,  smaller  organiza¬ 
tions  can  now  reap  the  benefits 
from  high-end  storage  solutions 
formerly  reserved  for  enterprise- 
class  companies.  Within  the  enter¬ 
prise,  IT  managers  first  bought 
advanced  storage  arrays  and  set 


them  up  as  Fibre  Channel  (FC) 
SANs,  which,  although  complicat¬ 
ed  to  install  and  run,  allowed  for 
multiple  servers  to  share  a  com¬ 
mon  pool  of  centrally  managed 
storage.  The  high-end  enterprise 
storage  arrays  they  purchased 
were  packed  with  sophisticated 
management  software  that 
allowed  the  companies  to  replicate 
data  over  the  network,  set  up 
redundant  paths  between  the 
servers  and  storage  to  ensure  high 
availability,  and  make  frequent 
copies  of  the  data,  which  made  it 
easy  to  quickly  recover  data  that 


had  been  inadvertently  corrupted 
or  deleted. 

In  addition,  the  advanced  stor¬ 
age  management  software  made  it 
easy  for  an  administrator  to  moni¬ 
tor  and  manage  all  the  storage  in 
the  environment  from  a  single 
location.  An  administrator  could 
perform  consolidated  backups,  add 
and  configure  new  storage  capacity 
quickly  and  easily,  allocate  and  re¬ 
allocate  storage  capacity  as  need¬ 
ed,  and  generate  reports  detailing 
all  aspects  of  storage  usage. 

These  capabilities  didn’t  come 
cheaply.  However,  large  enterpris¬ 
es  could  justify  the  big  expense  on 
the  basis  of  increased  efficiency, 
improved  performance,  higher 
availability,  greater  storage  utiliza¬ 
tion,  and  substantial  reductions  in 
administrative  costs,  especially 
when  it  came  to  backup.  For  exam¬ 
ple,  instead  of  making  multiple 
backups  as  the  University  of 
Portland  faced,  the  large  enterprise 
initiated  a  single  backup  process. 
And  the  administrators  immedi¬ 
ately  knew  not  only  whether  the 

data  was  correctly  backed  up  but, 

* 

unlike  Fessler,  they  knew  all  the 
details  of  storage  usage. 

SMBs,  meanwhile,  struggled  with 
storage  directly  attached  to  each 
server.  Directly  attached  storage 
certainly  was  low-cost,  and  it  was 
easy  to  set  up  and  configure  initial¬ 
ly.  However,  as  soon  as  the  organi¬ 
zation  needed  more  than  a  handful 
of  servers,  each  with  its  own 
attached  storage,  administration 
and  management  became  a  costly 
headache.  In  addition,  utilization  of 
the  storage  capacity  was  poor. 


SANs  for  the  masses 

LeftHand  builds  solutions  around 
industry-standard  hardware. 

Because  no  two  companies  are  alike,  LeftHand  Networks  has  devel¬ 
oped  highly  available,  scalable  iSCSI  SAN  solutions  that  run  on  mul¬ 
tiple  industry-standard  hardware  platforms.  With  open  iSCSI  SANs  from 
LeftHand,  customers  get  to  choose  the  right  platform  based  on  their 
performance,  capacity,  and  budget  requirements.  These  platforms 
include  the  HP  ProLiant  DL380,  the  LeftHand  NSM  260  and  NSM  160, 
as  well  as  SAN  solutions  from  more  than  20  other  OEM  partners.  This 
industry-leading,  open  iSCSI  SAN  approach  also  keeps  users  from  get¬ 
ting  locked  into  any  single  hardware  vendor.  LeftHand’s  SAN/iQ  solu¬ 
tions  offer  the  high  availability  of  a  cluster  solution  that  eliminates  both 
planned  and  unplanned  downtime. 

As  a  Microsoft  Gold  Certified  Partner,  LeftHand  is  committed  to  shar¬ 
ing  a  strategy  of  reducing  total  cost  of  ownership  by  improving  the  out- 

of-box  experience  for  iSCSI  SAN 

LeftHand  customers.  According  to  LeftHand 

NETWORKS  ♦**.'.*  customer  Uniden  American  Corp., 

“The  easy-to-manage  LeftHand 

SAN  allowed  us  to  consolidate  our  servers  and  storage  and  free  up  per¬ 
sonnel  to  tackle  other  projects." 

www.lefthandnetworks.com 


Designed  specifically  for  users  new  to  SANs,  LeftHand’s  patented  open  iSCSI  SAN  architecture  makes  it  easy  for 
you  to  upgrade  from  direct-attached  storage.  We  can  help  you  build  one  centrally  managed  storage 
environment  from  industry-standard  hardware  modules  such  as  the  HP  ProLiant  DL380  and  LeftHand’s  NSM 160 


and  260.  Clustering  these  modules  into  one  storage  pool  makes  it  easier  to  administer,  grow,  and  back  up  your 


application  and  file  storage.  Just  as  importantly,  our  solution  is  flexible  enough  to  grow  and  adapt  with  changes  to 
your  company,  even  if  you  can’t  see  them  coming.  Start  with  the  storage  you  need  today  and  then  add 
capacity  over  time  in  cost-effective,  modular  increments.  Install  the  storage  in  whatever  location  makes 
sense  --  any  facility,  anywhere  on  the  IP  network  -  and  manage  it  all  from  one  central  location. 

Plus,  ensure  your  data  is  always  available.  The  LeftHand  architecture  offers  unique  availability  features  that  pro¬ 
tect  your  data  whether  you  have  a  single  site  or  if  you’re  looking  for  a 
complete  data  protection  solution  across  multiple  sites.  All  the  high-end 
functionality  is  wrapped  into  one,  intuitive  management  interface  designed 


for  users  making  the  transition  to  a  SAN. 


Visit  our  web  site  to  download  a  free  white  paper  from  IDC  on  the  value  of 
open  iSCSI  SANs.  Learn  how  you  can  get  strength  in  numbers  from  an 
industry-standard  storage  solution. 
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Networked  storage  will  allow  [SMBs]  to 
reduce  the  amount  of  time  and  resources 
they  expend  trying  to  manage  multiple 
servers  with  directly  attached  storage. 


While  some  servers  desperately 
needed  more  storage,  other  servers 
sat  underutilized  with  storage  to 
spare,  and  there  was  no  practical 
way  to  make  the  excess,  idle  capaci¬ 
ty  on  one  server  available  to  anoth¬ 
er  server  that  needed  it. 

Enterprise-class  storage 
requirements 

The  storage  capabilities  enjoyed  by 
large  enterprises  looked  mighty 
tempting  to  SMBs.  In  fact,  “the 
needs  for  networked  storage  are 
probably  more  necessary  in  the 
SMB  space,”  said  Steve  Duplessie, 
a  senior  analyst  at  Enterprise 
Strategy  Croup,  Milford,  Mass. 
This  is  particularly  true  given  the 
nature  of  SMBs’  storage  usage. 
“SMBs  are  the  fastest  growing  in 
terms  of  the  percent  of  storage 
capacity  growth,”  Duplessie  said. 
As  importantly,  the  data  an  SMB 
stores  is  as  critical  to  that  organi¬ 
zation  as,  say,  a  large  brokerage’s 
data  is  to  the  brokerage  firm. 
Neither  can  survive  for  long  with¬ 
out  its  data. 

“SMBs  undoubtedly  need  net¬ 
worked  storage  for  data  protection 
and  for  efficiency.  Their  needs  are 
no  different  in  this  regard  than 
large  enterprises.  They  also  face 
the  same  compliance  require¬ 
ments  for  data  protection,”  said 
Rob  Higby,  director  of  product 
marketing  at  EqualLogic  Inc., 
Nashua,  N.H. 

The  data  backup  issue  alone  is 
driving  SMBs  to  networked  stor¬ 
age.  “From  a  data  protection  per¬ 
spective,  SMBs  need  this.  They 


can’t  risk  losing  data.  They  have  to 
track  it,  and  it  is  growing  exponen¬ 
tially,”  said  Bob  Roudebush,  prod¬ 
uct  manager  at  NSI  Software,  in 
the  Southborough,  Mass.,  office. 
Regulatory  compliance  and  litiga¬ 
tion  concerns  affect  every  organi¬ 
zation,  large  and  small.  Even  the 
smallest  SMBs  are  under  the  gun 
to  store  and  protect  personal 
information,  financial  data,  and 
even  email,  which  increasingly 
plays  a  role  in  litigation. 


High  needs,  modest  budgets 

Although  their  storage  needs  par¬ 
allel  those  of  large  enterprises, 
SMBs  are  different  in  a  number  of 
ways.  “SMBs  have  similar  needs  in 
terms  of  data  retention,  security, 
legal  and  compliance  issues,  and 
reporting,  but  there  is  a  difference 
in  scale,”  said  Peter  Smails,  senior 
director  of  product  marketing  at 
Hitachi  Data  Systems  Corp.,  head¬ 
quartered  in  Santa  Clara,  Calif. 
"The  difference  in  scale  shows  up 
in  how  SMBs  handle  the  chal¬ 
lenges  of  management  and  com¬ 
plexity.  They  can’t  just  throw 
money  into  the  building  of  a  com¬ 
plex  SAN.”  Said  Enterprise 
Strategy  Croup’s  Duplessie, 

"SMBs  need  to  be  able  to  grow 
their  storage  at  a  moment's 
notice,  and  without  causing  appli¬ 
cation  downtime.  Networked  stor- 


A  vision  driven 
by  usability 

Brocade  grows  leadership  position  through 
Microsoft  integration. 

It  is  no  wonder  that  Gartner  Inc.  recently  placed  Brocade  in  the  vaunted 
“Leaders”  section  of  its  Magic  Quadrant  for  Fibre  Channel  SAN  switch¬ 
es.  With  a  proven  commitment  to  standards-based  storage  solutions  that 
reduce  cost  and  complexity,  Brocade  is  simplifying  SAN  implementation 
with  its  SilkWorm  product  family.  Moreover,  Brocade  is  leveraging  its  SAN 
experience  to  pioneer  innovative  file  and  resource  services  with  its  new 
Tapestry  product  family.  A  key  element  of  this  user-focused  strategy  is  a 
long-standing  partnership  with  Microsoft  and  support  for  Windows-based 
solutions. 

Today,  Brocade  and  Microsoft  are  working  to  develop  branch  office  IT 
solutions  that  dramatically  simplify  distributed  storage  and  SAN  deploy¬ 
ments  while  extending  data  center  services  to  remote  offices.  According 
to  Microsoft’s  Ben  Fathi,  solutions 
such  as  Brocade  Tapestry  Wide  Area 
File  Services  (WAFS)  give  Microsoft 
customers  “access  to  a  powerful, 

proven  solution  to  the  challenge  of  providing  remote  offices  with  seam¬ 
less  access  while  consolidating  data  for  operational  efficiency.” 

www.brocade.com 
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TAPESTRY  FAMILY 


Data  Migration  Manager 

Provides  fast  and  easy  heterogeneous  data  migration 


Tapestry 

Application  Resource  Manager 

Automates  key  management  tasks 
between  servers,  storage,  and  software 


Wide  Area  File  Services 

Delivers  LAN-speed  read-write  access 
to  shared  files  across  WANs 


SILKWORM  FAMILY 


SilkWorm  Multiprotocol  Router 

2  Gbit/sec 
8  or  1 6  ports 
Ports  on  Demand 


SilkWorm  48000 

4  Gbit/sec  + 

256  ports 

16-  or  32-porl  modular  blades 


As  IT  management  becomes  increasingly  complex,  you  need  a  partner 
who  can  help  you  maximize  your  technology  investment.  Today,  Brocade" 
delivers  a  comprehensive  family  of  solutions  for  optimizing  your  IT  applications 
and  storage  environments.  Our  new  Tapestry  solutions  help  you  centralize 
server  administration  and  streamline  data  management.  And  our  SilkWorm 


SilkWorm  24000 

2  Gbit/sec  + 

1 28  ports 

1 6-port  modular  blades 


SilkWorm  4 1 00 

4  Gbit/sec 

16,  24,  or  32  ports 

Ports  on  Demand 


solutions  provide  one  of  the  industry's  broadest  4  Gbit/ sec  SAN  product 
families.  Together,  these  solutions  can  help  you  connect  and  manage  your 
storage,  seivers,  and  applications.  Make  the  connection  with  Brocade 


and  our  partners— and  continue  optimizing  your  IT  investment. 

SilkWorm  200E 


4  Gbit/sec 
8,  12,  or  16  ports 
Ports  on  Demand 


www.brocade.com 
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age  enables  SMBs  to  have  all  the 
benefits  large  enterprises  get." 

SMBs  may  need  the  kind  of 
storage  large  enterprises  enjoy,  but 
acquiring  networked  storage  has 
been  difficult.  “They  need  to  do  it 
without  it  costing  a  fortune  and 
without  their  needing  a  Ph.D.  to 
plug  the  stuff  in,”  Duplessie  con¬ 
tinued.  In  other  words,  high  cost 
and  complexity  have  prevented 
SMBs  from  implementing  net¬ 
worked  storage.  They  don’t  have 
the  fat  storage  budget  or  the  cadre 
of  highly  skilled  storage  experts  to 
make  it  all  work  as  large  enterpris¬ 
es  do. 

Technical  skills  may  be  as  big  a 
challenge  as  the  cost  of  networked 
storage.  “SMBs  don’t  have  the 
staff  that  can  do  this.  They  need  a 
turnkey  solution  they  can  take  out 
of  the  box,  turn  on,  and  configure 
in  minutes,”  said  Ralph  Lobato, 
HP’s  Microsoft  alliance  manager 


World  classic 

Emulex  delivers  business-critical  storage  solutions. 

Emulex  is  the  most  trusted  name  in  storage  networking  connectivity. 

The  world’s  leading  server  and  storage  vendors  choose  Emulex  stor¬ 
age  networking  connectivity  solutions,  and  Global  2000  companies  trust 
Emulex  for  their  mission-critical  SAN  infrastructure  solutions.  Emulex 
creates  multiprotocol  technologies  and  products  that  extend  the  value  of 
storage  infrastructures  and  expand  the  adoption  of  networked  storage. 
Emulex's  storage  networking  infrastructure  solutions  include  host  bus 
adapters,  embedded  storage  switches,  I/O  controllers,  and  SAN  storage 
switches.  The  company  consistently  delivers  industry-leading,  next-gen¬ 
eration  technologies  that  enable  its  customers  to  plan  seamless  product 
and  technology  transitions,  deploy  best-in-class  solutions,  and  stay 
ahead  of  the  storage  industry  technology  curve. 

Emulex  is  a  Microsoft  Gold  Certified  Partner.  The  two  companies’ 
solutions  address  the  full  range  of  the  networked  storage  market  (from 

the  data  center  to  the  extended 

EMULEX  enterprise  and  emerging  SMB  mar- 

We  network  storage  ket)>  with  3  common  vision  of  sim¬ 

plifying  the  deployment  and  man¬ 
agement  of  SANs  while  increasing  their  performance  and  availability. 

www.emulex.com 


The  business  value 
of  simpler  SAN 


SANs  deliver  attractive  bene¬ 
fits  to  SMBs,  but  for  too 
long  those  benefits  have  been 
beyond  their  reach  because  of 
the  difficulty  of  implementing  a 
SAN.  With  iSCSI,  the  storage 
industry  made  strides  in  easing 
SAN  implementation  by  using 
the  IP  networking  protocol, 
which  is  familiar  to  SMBs. 

However,  FC  remains  the  domi¬ 
nant  SAN  networking  protocol  due  to  its  high  per¬ 
formance  and  high  reliability.  Unfortunately,  traditional 
FC  implementation  requires  specialized  skills,  which 
are  lacking  at  most  SMBs. 

To  specifically  address  the  SAN  challenge,  Microsoft 
initiated  the  Simple  SAN  for  Windows  Server  Program 
under  the  Universal  Distributed  Storage  vision.  “With 
Simple  SAN  Microsoft  has  identified  over  too  com¬ 


plex  items  that  make  implement¬ 
ing  a  SAN  difficult.  We’ve  incor¬ 
porated  these  items  in  a  GUI 
that  makes  the  SAN  easy  to 
install,"  said  Tim  Lustig,  senior 
business  alliance  manager  at 
QLogic  Corp.,  Aliso  Viejo,  Calif. 

In  an  effort  to  further  simplify 
SAN  implementation,  Microsoft 
built  support  for  SANs  directly 
into  the  Windows  platform. 
Storage  vendors  take  advantage  of  this  built-in  sup¬ 
port  so  SMBs  don’t  have  to  bother  with  the  internal 
details.  Microsoft  also  has  worked  directly  with  core 
SAN  component  vendors  like  Emulex  Corp.,  Costa 
Mesa,  Calif.,  to  reduce  SAN  setup  complexity.  Finally, 
it  steers  customers  to  those  products  that  have 
proven  to  be  simple  to  implement  through  its  Simple 
SAN  for  Windows  Server  Program. 


The  Most  Trusted  Name  in  SAN  Connectivity  is  Now 
Enabling  Connectivity  for  the  HP  BladeSystem 

Introducing  the  Emulex-based  Fibre  Channel  Mezzanine  Card  for  the  HP  p-dass  BladeSystem. 

Based  on  the  same  highly  adaptive  Emulex  Host  Bus  Adapter  technology  that  has  been  a  trusted  element  of  HP  storage 
solutions  for  years,  the  Emulex-based  mezzanine  card  enables  seamless  migration  to  HP  blade-based  storage  environments. 


The  Emulex-based 
mezzanine  card  for  the 
HP  p-Class  BladeSystem 


Snap  It  In.  Watch  It  Fly. 

•  A  unique  scaleable  architecture  that  enables  your  blade  systems  to  grow  with  your  business 

•  A  flexible  firmware-based  design  that  adapts  to  your  changing  business  needs 

•  Performance  headroom  that  accommodates  real  world  fluctuations  in  storage  system  workloads 

•  Full  driver  compatibility  with  Emulex  family  of  Fibre  Channel  HBAs  simplifies  the  integration 
of  the  HP  BladeSystem  into  your  computing  environment 

Looking  for  SAN  connectivity  that'll  make  your  applications  fly? 

High  performance,  Emulex  HBA  technology  for  your  HP  BladeSystem  is  available  today. 

Visit  www.hp.com/go/bladesystem  for  worry-free  SAN  connectivity  for  your  HP  BladeSystem. 
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We  network  storage 


WWW.EMULEX.COM  NYSEiELX  800  EMULEX  1 
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There  are  two  keys  to  understanding 
how  Microsoft  envisions  UDS: 
universal  and  distributed . 


for  StorageWorks.  And  after  they 
have  installed  the  storage  in  min¬ 
utes  rather  than  days,  SMBs  need 
to  be  able  to  maintain  it  easily, 
without  the  involvement  of  storage 
experts. 

Taming  networking  concerns 

If  storage  itself  weren't  difficult 
enough  for  SMBs,  networked  stor¬ 
age  adds  another  complication — 
the  network.  Although  most  SMBs 
have  simple  local  area  networks, 
storage  often  requires  a  separate 
network  based  on  the  FC  protocol, 
which  requires  specialized  skills. 
Switches,  too,  present  a  challenge. 
“SMBs  need  relief  from  having  to 
manage  switches.  They  want 
something  they  can  turn  on  and 
forget,”  said  Brian  Hoke,  liaison 
with  Microsoft  for  storage  tech¬ 
nologies  for  Brocade  Communi¬ 
cations  Systems,  Inc.,  San  Jose, 
Calif. 

The  SMBs’  lack  of  awareness  of 
networked  storage  and  the  bene¬ 
fits  it  could  bring  may  hold  them 
back.  “Many  SMB  managers  sim¬ 
ply  are  not  aware  of  how  much 
networked  storage  can  help  them," 
Hoke  continued.  Networked  stor¬ 
age  will  allow  them  to  reduce  the 
amount  of  time  and  resources 
they  expend  trying  to  manage  mul¬ 
tiple  servers  with  directly  attached 
storage.  They  will  experience  high¬ 
er  storage  utilization  and  reduce 
the  amount  of  storage  capacity 
that  never  gets  used.  Similarly, 
they  will  experience  streamlined, 
more  reliable  backups  and  higher 
availability  of  their  data.  They  also 
can  be  confident  that  their  sys¬ 


tems  will  be  able  to  comply  with 
regulatory  mandates  to  save  and 
protect  data  as  well  as  respond 
efficiently  to  requests  by  regulators 
and  courts  for  stored  data. 

As  the  organization  grows,  it 
will  be  able  to  easily  increase  its 
storage.  “Adding  on  to  network 
storage  can  be  very  easy,  which 
eliminates  down  time  and  frees 
the  staff  to  do  other  things,” 
Duplessie  said.  If  networked  stor¬ 
age  is  good  for  large  enterprises,  it 
certainly  can  be  good  for  SMBs, 
too.  To  get  there,  all  SMBs  need  is 


to  find  a  storage  solution  that 
addresses  the  challenges  of  cost 
and  difficulty. 

UDS — enabling  networked 
storage  for  SMBs 

“Until  recently,  it  wasn’t  feasible  to 
bring  networked  storage  into  the 
SMB  space  due  to  the  problems 
of  cost,  complexity,  and  skills,” 
Duplessie  said.  Now,  however,  it 
is  feasible. 

Storage  technology  has  steadily 
evolved,  getting  less  costly  and 
easier  to  use  every  year.  But  even 
then,  few  SMBs  on  their  own  are 
likely  to  pull  together  the  disparate 
pieces  to  make  a  complete  net¬ 
worked  storage  solution.  It  re¬ 
quires  a  catalyst,  and  that  turned 
out  to  be  Microsoft.  “It  is  because 
of  Microsoft  that  SMBs  will  be 
able  to  do  networked  storage. 
Microsoft  makes  things  cheap  and 


Smart  storage 

HDS  points  way  to  reducing  costs  and  improving  productivity. 

Hitachi  Data  Systems  offers  Application  Optimized  Storage™  solu¬ 
tions,  an  integrated  portfolio  of  hardware,  software,  and  services 
that  allows  users  to  match  application  requirements  to  their  storage 
infrastructure  for  optimal  performance,  availability,  and  functionality  at 
the  best  possible  price.  These  solutions  include: 

■  A  first-to- market  certified  Simple  SAN  solution  enables  smaller  organi¬ 
zations  to  enjoy  the  benefits  of  networked  storage. 

■  Tiered  storage  for  large  and  midsize  organizations,  based  on  the 

* 

award-winning  Hitachi  TagmaStore™  Universal  Storage  Platform, 
Network  Storage  Controller,  Adaptable  Modular  Storage,  and 
Workgroup  Modular  Storage  offerings. 

■  Consolidating  Microsoft  Exchange  and  SQL  applications  on  Hitachi 
storage  reduces  the  cost  and  complexity  of  managing  these  rapidly 
growing  stores  of  application  data. 

■  Local  and  remote  business  continuity  and  backup/recovery  solutions 
ensure  high  availability  of  mission-critical  .  -  __ 

Microsoft  applications.  Ill 

■  Data  archiving  for  Exchange  environments  DATA  SYSTEMS 
ensures  secure,  long-term  data  protection. 

■  Global  Solution  Services  professionals  help  users  through  consulting, 
design  and  implementation,  and  education  services. 

www.hds.com 
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WE'RE  THE  FIRST 

STORAGE 

COMPANY  THAT 

DOESN'T  WANT  TO 

TALK  TO  YOU 

ABOUT  STORAGE. 

INSTEAD,  WE  WANT  TO  TALK  ABOUT  YOUR  APPLICATIONS. 


Application  Optimized  Storage™ solutions 


Other  storage  companies  will  go  on  and  on  about  their  stor¬ 
age  products,  and  not  much  else.  But  at  Hitachi  Data  Systems, 
we  understand  that  it's  not  about  us,  it's  about  you. 

We  know  your  business  runs  on  applications — strategic  appli¬ 
cations  that  are  critical  to  your  growth.  Therefore,  we've  taken  a 
strategic  approach  to  storage,  based  on  how  applications  use 
data.  We  call  them  Application  Optimized  Storage™  solutions. 

These  solutions  help  you  manage  complex  issues  like  infra¬ 
structure  simplification  and  business  continuity,  and  include 
software  tools  for  storage  management, data  replication, and  data 
movement  across  heterogeneous,  tiered  storage  systems. 


All  told,  Application  Optimized  Storage  solutions  mean 
efficiency  and  lower  costs.  IT  runs  better.  And  ultimately,  your 
business  runs  better,  it's  all  part  of  our  commitment  to  being  your 
Partner  Beyond  Technology. 


For  smaller  companies,  Hitachi  Data  Systems,  as  the  first  Fibre 
Channel  storage  array  provider  to  achieve  Microsoft's  Simple 
SAN  for  Windows  Server  designation,  offers  plug  and  play 
simplicity  so  you  can  enjoy  the  benefits  of  networked  storage. 
To  learn  more  about  SAN  simplifica-  ra¬ 

tion  solutions  download  a  free  white  HI  IXVV^’ill 
paper  at  www.hds.com/go/aos  data  systems 
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NSI  has  businesses 
doing  Double-Take 

Solution  provides  data  protection  and  high  availability. 

Business  simply  does  not  happen  unless  information  and  applications 
are  protected  and  available  on  demand.  That  is  why  more  than  8,000 
companies  and  organizations  around  the  world  rely  on  Double-Take  for 
data  protection  and  high  availability.  Double-Take,  from  NSI  Software,  is 
an  award-winning  solution  that  delivers  significant  savings  over  hard¬ 
ware-based  solutions  while  providing  continuous,  real-time  backup  and 
automatic  failover  capabilities.  What’s  more,  as  a  Microsoft  Cold 
Certified  Partner,  NSI  provides  peerless  data  protection  for  Exchange 
Server  environments  as  well 

as  for  SQL  Server  and  the  Hni  ihlo  -TbL'O* 

broader  Windows  world.  I  CUxtl 

Independent  praise  for  byNSI  Software 

Double-Take  has  flowed  from  a  variety  of  sources.  For  example,  I  DC 
called  NSI  "a  leader  in  the  Windows,  host-based  replication  arena,”  and 
NetworkWorld  listed  Double-Take  as  a  “Best  of  Tests"  finalist  in  2005. 

Said  Bill  Crowley,  CIO  at  Covanta  Energy  Corp.,  “Double-Take  delivers 
over  $200,000  in  savings  compared  with  tape  backup.” 

www.nsisoftware.com 


easy  as  compared  to  the  expen¬ 
sive,  complicated  status  quo.  And 
Microsoft,  because  of  its  market 
muscle,  can  also  get  the  other  ven¬ 
dors  to  play  nice.  SMBs  really  ben¬ 
efit  when  Microsoft:  pulls  out  the 
stick,”  Duplessie  explained. 

Behind  the  stick  is  Microsoft’s 
Universal  Distributed  Storage 
vision.  UDS  is  intended  to  main¬ 
stream  high-end  functionality  for 
the  purpose  of  delivering  storage 
solutions  built  on  industry-standard 
hardware  offered  through  multiple 
independent  partners.  One  result¬ 
ing  goal  is  to  lower  the  total  cost  of 
storage  ownership.  To  do  this, 
Microsoft  has  enhanced  Windows 
itself  to  ensure  that  it  manages  dis¬ 
tributed  data  storage  more  cost- 
effectively  than  any  other  platform, 
irrespective  of  whether  the  data  sits 
on  a  server  or  a  remote  worker’s 
desktop;  whether  the  data  is  cen¬ 
tralized  or  spread  across  branch 


offices;  or  whether  the  data  is 
stored  on  a  SAN  or  network- 
attached  storage  (NAS). 

There  are  two  keys  to  under¬ 
standing  how  Microsoft  envisions 
UDS:  universal  and  distributed. 

“To  us,  universal  means  making 
sure  the  storage  is  universally 
available  to  any  organization,  large 
or  small,  using  similar  technology 
differentiated  only  by  the  nature  of 
the  organization,”  said  David 
Colds,  product  unit  manager  for 
Microsoft’s  Windows  Core  File  and 
Storage  Systems. 

The  distributed  part  of 
Microsoft’s  UDS  vision  revolves 
around  storage  replication.  “It  is 
about  seeing  storage  as  a  distrib¬ 
uted  system,”  Golds  said.  When 
storage  is  viewed  as  a  distributed 
system,  Colds  explained,  it  is 
treated  as  a  file  service  rather  than 
as  a  file  server.  Traditionally,  stor¬ 
age  was  accessed  through  a  file 


server,  which  meant  that  the  user 
had  to  know  on  which  server  the 
data  resided.  As  a  file  service,  the 
data  can  reside  anywhere  or  be 
replicated  to  multiple  places.  The 
users  don’t  need  to  know  or  care 
where  the  data  resides;  the  system 
will  bring  the  data  to  them  from 
the  right  place. 

Windows  at  work 

Microsoft  has  been  steadily  imple¬ 
menting  the  UDS  vision  in  a  series 
of  products  included  in  the 
Windows  platform.  For  example,  in 
the  latest  release,  Windows  Server 
2003  R2,  Microsoft  included 
Storage  Manager  for  SANs,  which 
is  a  sophisticated  storage  manage¬ 
ment  tool  for  SMBs. 

Storage  Manager  for  SANs  “is 
intentionally  not  a  full-featured 
SAN  management  tool.  It  is 
designed  to  address  only  those 
classes  of  problems  that  SMBs 
face,”  Colds  said.  For  example,  it 
allows  organizations  to  provision 
their  storage  very  easily,  but  it 
doesn’t  do  SAN  zoning,  which  is  a 
complicated  process.  “The  majori¬ 
ty  of  SMBs  don’t  need  zoning,” 
Colds  said.  Rather  than  make  the 
product  unnecessarily  complicat¬ 
ed,  Microsoft  will  steer  those  few 
SMBs  needing  zoning  to  one  of  its 
partners  who  provide  complex 
SAN  management  tools. 

In  addition  to  Storage  Manager 
for  SANs,  Windows  Server  2003 
R2,  an  update  release  of  the 
Windows  Server  2003  operating 
system,  takes  advantage  of 
Windows  Server  2003  with  Service 
Pack  i  (SPi)  to  deliver  greater  sta¬ 
bility  and  increased  security  result¬ 
ing  from  its  proven  code  base.  For 
example,  it  provides  improved 
identity  and  access  management 
across  security-related  boundaries 
through  Active  Directory 
Federation  Services  (ADFS),  which 
lowers  the  total  cost  of  ownership 
(TCO)  and  boosts  security,  espe- 
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BREATHE  EASY 

WE'VE  GOT  YOU  COVERED. 


WE'VE  EARNED  A  REP  FOR  PROTECTING 
SOME  PRETTY  IMPORTANT  DATA. 

More  than  half  of  the  Fortune  500  breathe  easy 
because  they  count  on  Double-Take®,  the  premier 
software  for  continuous  data  protection  and 
application  availability. 

When  losing  data  is  not  an  option, 
your  only  option  is  Double-Take. 


Microsoft 

GOLD  CERTIFIED 


BEST 

PRACTICES  IN 

STORAGE 

AWARDS  I’ttOC.KAM 
MHU  ■A.Jtu 


Inc. 

500 


^Double-Take 

For  more  information,  visit  www.doubletake.com 
or  call  us  at  888-674-9495. 
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Keeping  it  simple 

EqualLogic’s  PS  Series  features  consolidated, 
self-managing  storage. 


EqualLogic®  makes  it  simple  to  set  up,  manage,  and  grow  your  SAN. 

The  PS  Series  from  EqualLogic  delivers  intelligent,  enterprise-class 
iSCSI  SAN  solutions  that  enable  businesses  of  all  sizes  to  realize  the  eco¬ 
nomic  benefits  of  consolidated,  self-managing  storage.  EqualLogic’s  PS 
Series  iSCSI-based  storage  arrays  integrate  with  the  latest  Microsoft 
Windows  Server  2003  R2  storage  technologies,  including  Microsoft’s 
Storage  Manager  for  SANs,  Virtual  Disk  Service  (VDS),  and  Volume 
Shadow  Copy  Service  (VSS).  The  PS  Series,  the  first  storage  system  to  be 
given  the  Microsoft  Simple  SAN  designation,  has  won  industry  accolades, 
including: 

■  Editor’s  Choice  from  Storage  Pipeline 
■  Product  of  the  Year  from  Network  Magazine 

m  Best  iSCSI  SAN  from  InfoWorld  mm  , 

EQUALLOGIC 

Alan  Hunt,  operations  manager  simbifvino networked storage- 

at  the  Michigan  law  firm  of  Dickinson  Wright  PLLC,  summed  up  the 
benefits  of  the  PS  Series:  “All  the  performance,  reliability,  and  functionality 
I  could  want  right  from  the  start.” 

www.equallogic.com 


dally  when  collaborating  with  part¬ 
ners  or  deploying  Internet-facing 
Web  applications. 

In  other  areas,  Microsoft  and  its 
partners  deliver  sophisticated 
capabilities  comparable  to  the 
high-priced  large  enterprise  fea¬ 
tures  provided  by  traditional  stor¬ 
age  vendors.  Microsoft's  Volume 
Shadow  Copy  Service  (VSS),  for 
example,  lets  SMBs  make  snap¬ 
shots  of  data,  replicate  data,  and 
manage  those  copies  just  as  buy¬ 
ers  of  the  more  costly  products  do. 
VSS  is  a  powerful  capability  yet 
simple  to  use.  “You  can  make 
shadow  copies  during  the  day.  At 
some  point  you  may  need  to  go 
back  to  an  older  version  of  the 
data.  So,  you  just  right-click  on  the 
folder  and  see  a  list  of  previous 
versions,”  Golds  said.  In  the  past, 
this  kind  of  capability  was  quite 
expensive.  Today,  it  is  included  in 
Windows  Server  2003. 

R2  enhances  Windows'  replica¬ 
tion  capabilities  by  providing  repli¬ 
cation  to  multiple  remote  sites 
over  the  WAN,  and  it  does  so  in  a 
way  that  fits  with  the  SMB’s  bud¬ 
get  and  resource  constraints.  For 
example,  Golds  said,  “You  can  syn¬ 
chronize  files  over  the  network, 
but  you  are  only  sending  the 
pieces  that  have  changed,  not  the 
whole  file  or  document.”  Sending 
only  what  has  changed  saves  the 
organization  time  and  bandwidth. 
This  improved  replication  in  R2 
not  only  saves  bandwidth  but  also 
removes  the  need  for  backup  in 
branch  offices. 

Integrated  and  compatible 

“What  the  UDS  vision  has  ushered 
in  is  an  order-of-magnitude  im¬ 
provement  for  SMBs  from  two 
years  ago,"  said  Karl  Chen,  vice 
president  of  marketing  and  busi¬ 
ness  development  at  LeftHand 
Networks  Inc.,  Boulder,  Colo.  In 
addition  to  packing  advanced  fea¬ 
tures  like  VSS,  Virtual  Disk  Service 


(VDS),  and  multipathing  (via  the 
Multipath  I/O  technology,  or 
MPIO)  for  high  availability  into 
Windows,  “Microsoft  has  integrat¬ 
ed  storage  technology  right  into 
the  operating  system,  making  it 
available  and  compatible.  It  elimi¬ 
nates  any  integration  and  compati¬ 
bility  issues.  That  allows  us  to  build 
complementary  technology  that 
takes  full  advantage  of  the  capabili¬ 
ties  Microsoft  has  built  into  the 
operating  system,"  he  continued. 

The  kind  of  simplicity  the  UDS 
vision  brings  to  networked  storage 
can  pay  off  big.  St.  Mary  and  All 
Angels  School,  Aliso  Viejo,  Calif., 
discovered  the  benefits  of  SANs 
when  the  school’s  students 
became  heavily  involved  in  stor¬ 
age-intensive  rich  media,  which 
has  become  integral  to  the  learn¬ 
ing  experience.  The  increased  stor¬ 
age  demands  forced  the  school  to 
make  the  transition  from  multiple 
servers  with  directly  attached  stor¬ 


age  to  a  multiterabyte  FC  SAN 
from  HP,  a  transition  it  could  not 
have  made  the  old  way. 

“We  are  understaffed,  and  we 
should  have  at  least  one  MCSE 
[Microsoft  Certified  Systems 
Engineer],  but  even  without  an 
MCSE,  implementing  a  SAN  is  a 
lot  easier,”  said  Michael  Magaldi, 
director  of  technology.  And  the 
SAN  itself  has  made  a  big  differ¬ 
ence.  “Without  the  SAN  we  could¬ 
n’t  provide  the  level  of  service  to 
the  students  that  we  do.  The  SAN 
lets  us  do  much  more  without  tak¬ 
ing  a  lot  of  our  time,"  he  said. 

Two  years  ago  networked  storage 
would  have  been  beyond  the  reach 
of  an  SMB  like  St.  Mary’s.  Today, 
with  Microsoft’s  leadership  and  its 
rich  partner  ecosystem,  any  organi¬ 
zation  can  take  advantage  of 
advanced,  networked  storage. 


Alan  Radding  is  a  freelance  technolo¬ 
gy  writer  in  Newton,  Mass. 


And  we  have  the  Microsoft”  Simple  SAN  designation  to  prove  it. 

The  EqualLogic”  PS  Series  is  the  first  storage  array  to  earn  Simple  SAN 
status.  Probably  because  our  award-winning  iSCSI  storage  solutions  ship 
with  the  latest  Microsoft  technologies  like  MPIO,  VDS,  and  VSS  -  all  to 
integrate  seamlessly  with  Microsoft  Windows  Server  2003  R2  technology. 
The  last  thing  you  want  in  your  data  center  is  needy  storage,  so  consider 
paying  a  little  attention  to  us  now,  and  very  little  later.  Download  your 
free  technical  reports  on  Microsoft  environments  at 
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lights  reserved. 


Mike  installed  a  SAN  today.  During  recess. 


Meet  Mike  Magaldi,  a  teacher  who  installed  a 
HP  Small  Business  SAN  for  his  school  in  minutes!  It's  that  simple. 


St.  Mary's  School  makes  sure  every  dollar 
counts.  Teachers  wear  many  hats.  So  when 
the  school  wanted  to  build  a  new  digital 
multimedia  studio,  Mike  Magaldi  stepped  in. 

Mike  is  no  SAN  expert,  but  he  found  that  a 
SAN  was  the  best  storage  solution  for  the 
new  studio.  Luckily,  the  affordable  new  HP 
MSA  Small  Business  SAN  is  so  simple,  Mike 


was  able  to  install  it  in  minutes  —  by  just 
following  the  Small  Business  SAN  Wizard. 
And  now,  St.  Mary's  students  are  taking 
learning  to  a  whole  new  level.  Visit 
www.hp.com/go/msal  000  to  find  out  how 
easy  it  is  to  take  your  organization  to  a 
whole  new  level  with  simple,  low-cost  SANs 
powered  by  QLogic. 


POWERED  BY 

\HrM  SIMPLE  LOW  COST  SANS  QLOGIC 


02006  QLogic  Corporation.  All  rtghb  rewrved.  QLogic  is  3  registered  trademark  of  QLogic  Corporation  The  QLogic  logo  Is  1  trademark  of  QLoqic  Corporation,  wfticfi  may  M  revision*)  in  some  jurtediclions.  All  other  bonds  and  product  name*  ate  tradonwxj  or  ragtstarwl  trademark*  of  ter  mipec***  hotftn 
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NET  INFRASTRUCTURE 

■  SECURITY  ■  SWITCHING  ■  ROUTING  BVPNS  ■  BANDWIDTH  MANAGEMENT  BVOIP  i:  WIRELESS  LANS 


Short  Takes 


■  F5  Networks  IS  upgrading  its 
WANJet  traffic  optimization  appliance 
to  help  speed  up  remote  file  access 
over  a  WAN  link.  The  device,  which  sits 
in  remote  offices  and  in  corporate  data 
centers,  can  now  accelerate  access  to 
Common  Internet  File  System  files, 
Microsoft's  commonly  used  format  for 
network  file  sharing.  Version  4.0  of 
WANJet  could  help  users  in  offices  with 
centralized  file  servers  retrieve  and  edit 
documents  faster,  F5  says.  Experts  say 
the  devices  could  be  used  to  replace 
file  servers  in  branch  offices  as  a  way 
to  speed  backup  of  remote  data. The 
new  version  of  the  appliance  is  expect¬ 
ed  to  be  available  next  month.  Pricing 
starts  at  $1,795  per  appliance. 

■  Alcatel  last  week  said  it  will  partner 
with  IBM  to  let  the  companies  offer 
Alcatel’s  Internet-based  telephony  soft¬ 
ware  along  with  IBM's  BladeCenter 
range  of  servers.  The  deal  is  aimed  at 
providing  customers  with  a  single  IT 
and  telecom  infrastructure,  and  will 
include  Alcatel’s  OmniPCX,  OmniVista 
and  OmniTouch  software  packages, 
coupled  with  IBM  BladeCenter  servers. 
Financial  terms  of  both  agreements 
were  not  disclosed. 

■  Two  recently  released  reports  from 
the  Deil'Oro  Group  have  good  news  and 
bad  news  for  Cisco;  while  one  report 
shows  the  vendor  maintained  a  strong 
lead  in  the  carrier  router  market,  anoth¬ 
er  says  Cisco  is  facing  challenges  in  the 
IP  PBX  market.  Deil'Oro  says  Cisco 

|  grew  its  lead  in  carrier  routers  in  2005 
over  rival  Juniper,  while  the  market 
overall  reached  $4.4  billion  —  matching 
a  previous  levels  at  the  height  of  the 
dot-com  boom  in  2000.  But  in  IP  PBXs, 
one  of  Cisco's  six  “Advanced 
Technologies,”  Cisco  was  recently 
edged  out  of  the  top  spot  by  Nortel, 
Deil'Oro  says.  For  the  forth  quarter  of 
2005,  Nortel  sold  more  IP  PBX  lines  — 
extensions  on  a  PBX  that  are  IP  capa¬ 
ble  —  than  Cisco,  followed  by  Avaya, 
which  came  in  third.  Overall,  Deil'Oro 
says  IP  PBX  line  sales  grew  42%  in  the 
fourth  quarter  over  the  same  time  peri¬ 
od  a  year  ago,  while  TDM  voice  line 
sales  decreased  2%. 


Airport  saturates  locale  with  wireless  nets 


BY  JOHN  COX 

Atlanta’s  airport  is  now  saturated  with 
wireless  connectivity,  serving  travelers 
and  employees. 

In  January,  Hartsfield-Jackson 
Atlanta  International,  one  of  the 
busiest  airports  in  the  nation,  threw 
the  switch  on  the  second  of  two  wire¬ 
less  networks  that  blanket  all  con¬ 
courses  and  gates.  The  system  uses 
fiber, shielded  coaxial  cable  and  hard¬ 
ware  from  LCG  Wireless  to  distribute 
cellular  signals  from  carrier  base  sta¬ 
tions  to  ceiling-mounted  antennas 
throughout  the  airport. 

The  cell  coverage  complements  an 
airport-wide  public  wireless  LAN 
(WLAN),  which  went  live  last  October. 

“We  needed  an  infrastructure  to  sup¬ 
port  voice,  video  and  data  services 
throughout  the  entire  airport,  both 
wired  and  wireless,”  says  Lance  Lyttle, 
the  airport’s  CIO. Users  include  travelers, 
airport  tenants  such  as  airlines,  conces¬ 
sions,  and  airport  employees. 

The  solution  was  to  create  two  neutral 
host  systems.  The  airport  acts  as  a  land¬ 
lord,  building  and  maintaining  both 
networks,  which  can  be  used  by  several 
carriers  or  service  providers. 


Every  nook  and  cranny 

The  idea  behind  distributed  antenna 
systems  (DAS),  such  as  that  of  LCG 
Wirelesses  to  bring  high-quality  cell  sig¬ 
nals  to  every  nook  and  cranny  of  large 
structures.  For  Hartsfield,  that  means 
covering  nearly  6  million  square  feet. 
Today  Cingular,  MetroPCS,  T-Mobile  and 
Verizon  offer  voice  and  data  service 
over  this  DAS  infrastructure.  Some  have 
begun  to  deploy  advanced  3G  services 
over  the  system. 

The  carriers  installed  their  base  sta¬ 
tions  at  an  airport  site  dubbed  the  tel- 
com  hotel.There.the  radios  are  plugged 
into  LCG’s  Main  Hub,  which  converts 
the  radio  energy  into  an  optical  signal. 
That  signal  runs  through  a  fiber  web  to 
remote  hubs,  which  convert  the  signal 
back  into  radio  frequency  energy. 
Shielded  coaxial  cable  carries  the  sig¬ 
nal  from  a  hub  to  several  remote  access 
units,  which  are  like  access  points  for 
cellular,  mounted  in  the  ceiling  to  cover 
a  specific  area. 

The  deployment  was  straightforward 
and  smooth,  says  Daver  Malik,  wireless 
voice  engineer  for  the  airport’s  IT  group. 
Technically  the  main  challenge  was  mak¬ 
ing  sure  the  cell  signals,  covering  differ¬ 


ent  parts  of  the  spectrum,  didn’t  interfere 
with  each  other,  Malik  says.  LCGs  archi¬ 
tecture  minimizes  the  impact  if  any  DAS 
component  fails,  and  the  blades  in  the 
Main  Hub  can  be  quickly  replaced  if 
necessary  Malik  says. 

The  DAS  infrastructure  also  will  be 
used  by  city,  state  and  federal  public 
safety  staff  and  emergency  responders. 
The  851-869MHz  band  is  reserved  for 
this  use,  so  emergency  crews  can  side¬ 
step  the  public  cellular  bands. 

Pervasive  wireless  LAN 

The  WLAN  also  was  straightforward, 
though  it  entailed  laying  a  lot  of  new 
Ethernet  cable.  The  cabling  connects 
151  Cisco  1230  802.1  lb/g  access  points 
to  Cisco  2000  and  3000  switches,  says 
Dennis  Rose,  the  airport’s  technical  ser¬ 
vices  manager. 

Following  Cisco’s  acquisition  last  year 
of  Airespace,  which  helped  pioneer  the 
use  of  WLAN  switches  or  controllers,  the 
airport  IT  staff  launched  a  redesign  of 
the  WLAN.  A  controller-based  architec¬ 
ture  creates  a  central  point  for  securing 
and  managing  large  WLANs. 

Next  month,  Rose’s  team  will  start 
See  Airport  page  20 


Wireless  Atlanta 

Atlanta's  Hartsfield-Jackson  airport  has  implemented  a 
two-part  wireless  infrastructure  that  blankets  the  airport. 


Fiber,  coaxial  cable  distribute  strong 
cell  signals  through  all  areas. 


Several  cell  carriers  offer  voice 
and  data  services,  including  3G. 
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Extreme  scales  up  metropolitan  Ethernet 


Ethernet  aggregation 


Extreme's  BlackDiamond  12K  is  aimed  at  tying  together  large  numbers  of 
Ethernet  links  and  bridging  end  customers  to  service  networks. 
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Up  to  80,000  Layer 
2  VPNs,  16  million  A. 

individual  customers  it!. 


Q  By  embedding  an  extra  MAC  address  field  into  an  Ethernet  frame,  Extreme  says  it  can  increase  exponentially 
the  number  of  Layer  2  VPNs  and  individual  users  it  can  support.  _ _ 

0  Support  for  more  Layer  2  VPNs  lets  the  BlackDiamond  12K  connect  to  other  carrier  networks  with  non-routed 
Ethernet  links,  which  are  less  expensive  and  simpler  to  administer  than  routed  connections,  Extreme  says. 


BY  PHIL  HOCHMUTH 

Extreme  Networks  is  readying  a  large- 
enterprise  Ethernet  switch  aimed  at  tying 
together  businesses  with  advanced  Layer  2 
VPN  services,  as  well  as  consumers  with 
high-bandwidth  offerings  such  as  IP  TV 

Extreme  says  its  BlackDiamond  12K 
switch  uses  new  programmable  network 
processors  and  ASICs  to  divide  Ethernet 
pipes  into  virtual  LAN  (VLAN)  segments, 
and  provide  as  many  as  eight  levels  of  traf¬ 
fic  QoS  for  as  many  as  80,000  users 
attached  to  a  single  switch. 

The  BlackDiamond  12K  chassis  has  four 
module  slots  (not  counting  redundant 
management  modules),  which  can  house 
20-port  Gigabit  Ethernet  blades,  or  two- 
port  10G  Ethernet  modules.  The  Gigabit 
Ethernet  module  includes  fiber  and  cop¬ 
per  ports,  letting  users  deploy  as  many  as 
20  ports  with  a  mix  of  wiring.  (The  dual¬ 
port  10G  blade  is  fiber-only).  The  switch 
runs  Version  11.4  of  the  vendors  Extreme- 
XOS  switch  software,  which  is  based  on  a 
Unix/Linux-like  operating  system  kernel, 
letting  services  and  features  be  turned  off 
and  on  and  configured  without  requiring 
the  device  to  reboot. 

The  modules  include  new  network  sili¬ 
con  and  processors  that  greatly  boost  the 
number  of  VLAN  segments  and  individual 
traffic  flows  the  switch  can  support. 


Previous  Extreme  switches  could  support 
individual  QoS  traffic  settings  for  about 
2,000  users  attached  to  a  line  card. 

To  scale  Layer  2  VPN  connections,  the 
BlackDiamond  12K  modules  also  use  an 
emerging  IEEE  standard  for  encapsulating 
media  access  control  (MAC)  addresses  of 
user  connections  inside  large  Ethernet 
frames,  used  for  carrying  traffic  over  a 
backbone.This  pending  802.1  ah  standard, 
known  as  MAC-in-MAC,  lets  the  number  of 
VLANs  a  switch  can  support  scale  expo¬ 
nentially  from  4,000  to  16  million. 
(Carriers  typically  run  individual  cus¬ 
tomers’  traffic  as  VLANs  —  letting  the  traf¬ 
fic  be  segmented  from  other  users  —  to 
measure  and  monitor  performance,  and 
for  billing  purposes). 

For  carriers  and  large  businesses  looking 
to  deploy  large,  Layer  2,  or  flat,  networks, 
the  BlackDiamond  12K  might  be  helpful, 
one  analyst  says. 

“It’s  basically  managing  Ethernet  in  a 
more  leased-line  wayf  says  John  Mazur, 
research  director  for  Gartner.  “I  think  this 
capability  will  apply  to  both  [carriers]  and 
carrier-class  enterprises  that  prefer  do-it- 
yourself  networking,  with  their  own  dark 
fiber  and  network  backbones.” 

To  this  end,  the  BlackDiamond  12K 
also  supports  Extreme’s  Ethernet 
Automatic  Protection  Switching,  which 


lets  Ethernet  switches  be  deployed  in  a 
redundant  ring,  as  opposed  to  a  tradi¬ 
tional  start  topology.  This  provides 
failover  of  50  millisec  in  case  of  a  link 
failure,  vs.  the  1  to  30  seconds  it  can  take 
standard  Layer  2  Ethernet  to  redirect 
traffic  around  a  downed  link. 

Providers  of  metropolitan  Ethernet  ser¬ 


vices, such  asYipes  Enterprise  Services, say 
the  BlackDiamond  12K  will  be  useful  in 
creating  large-scale  backhaul  connections 
among  carriers  using  simple  Ethernet,  as 
opposed  to  more  expensive  technologies 
such  as  ATM,  or  routed  IP  links. 

The  BlackDiamond  12K  starts  at  $60,000 
and  will  be  available  next  month.  ■ 


Airport 

continued  from  page  19 

downloading  new  Cisco  code  to 
the  existing  access  points  so  they 
can  communicate  with  the  Cisco 
controllers  to  be  installed  in  the 
data  center. 

Today,  four  Wi-Fi  Internet  pro¬ 
viders  offer  service  to  Hartsfield 
passengers  over  the  WLAN: 
Access  Anyplace,  Boingo,  Con¬ 
course  and  Sprint. 

Employees  jump  on  the  WLAN 
whenever  they  need  to.  But  the 
airport  requires  not  only  a  valid 
user  name  and  password,  but 
also  a  registered  media  access 
control  address,  before  the 
employee  is  granted  access.  A 
Cisco  RADIUS  server  handles 
authentication  for  the  WLAN, 
and  then  hands  off  authentica¬ 
tion  information  to  the  corpo¬ 
rate  RADIUS  server  so  WLAN 
users  can  access  services  on 
the  backbone. 

Airport  laptops  have  Verizon 
cellular  AirCards  so  that  users 
can  make  a  data  connection, 
over  a  virtual  private  network,  if 
they’re  beyond  the  range  of  the 
airport’s  WLAN. 


Passengers  logging  on  to  the 
WLAN  are  segregated  on  a  sep¬ 
arate  virtual  LAN.  Some  of  the 
passengers  access  the  Internet 
via  the  WLAN  home  page.  But 
subscribers  to  one  of  the  air¬ 
port’s  Wi-Fi  providers  can 
launch  their  own  provider’s 
client  application,  bypassing 
the  airport  Web  page. 

Rose’s  team  relies  on  Air- 
Defense’s  AirDefense  Enterprise 
software  and  radio-frequency 
sensors  to  monitor  the  WLAN  fre¬ 
quencies,  detect  unauthorized 
radios  and  block  them. 

Administrators  see  from  one  to 
10  deliberate  attacks  daily,  usu¬ 
ally  travelers  that  have  equipped 
a  wireless  laptop  with  sniffer  soft¬ 
ware  for  probing  WLANs.“We  can 
notice  these  with  the  AirDefense 
software,  but  they’re  not  affecting 
our  network,”  Rose  says. 

The  WLAN  and  the  distributed 
antenna  system  are  designed  to 
host  multiple  service  providers. 
And  for  both  systems,  the  most 
complex  issues  were  about 
accommodating  the  differing 
business  models  and  service 
plans  of  the  airport’s  various  carri¬ 
ers  and  providers.  ■ 


Wireless  bridges  offer  net  options 


BY  JOHN  COX 

Orthogon  Systems  has  introduced  new  versions 
of  its  software-defined  wireless  bridges,  along  with 
new  converters  that  let  customers  blend  Ethernet 
and  TDM  traffic  over  a  wireless  link. 

Together,  the  new  products  will  let  corporations 
extend  Ethernet  networks  and  bundle  T-l  and  E-l 
traffic  on  high-throughput  wireless  links,  quickly 
connecting  campus  buildings,  or  a  remote  site  such 
as  a  back-up  data  center,  without  the  need  for  fiber 
or  leased  lines. 

Like  the  existing  5.8GHz  products,  the  new  5.4GHz 
radios  deliver  an  aggregate  capacity  of  43Mbps 
(one-way  capacity  is  about  half  of  that).  But  with 
twice  the  spectrum  of  5.8GHz,the  5.4GHz  band  will 
let  radios  be  more  densely  clustered  in  a  given  area 
without  interference.  More  of  the  5.4GHz  band  is 
being  made  available  for  unlicensed  use  around 
the  world,  and  Orthogon  officials  expect  the  United 
States  to  follow  suit  later  this  year. 

Among  other  things,  the  increased  spectrum 
means  the  bridges  can  run  in  a  band  with  less  inter¬ 
ference.  The  bridges  typically  span  distances  up  to 
30  miles,  but  with  200  to  300  towers  can  reach  124 
miles,  Orthogon  says. 

The  OS-Gemini  Integrated  is  a  wireless  bridge 
with  built-in  antennas.The  OS-Gemini  Connector- 
ized  is  the  same  bridge  with  connectors  for  high- 
gain  external  antennas.  Both  offer  the  maximum 
43Mbps  throughput.  Orthogon  also  offers  OS- 


Gemini  Lite  versions  of  both;  these  lower-priced 
models  have  aggregate  bandwidth  of  22Mbps. 

Orthogon  radios  use  a  variant  of  multiple-input 
multiple-output,  which  it  calls  multibeam  space 
time  coding,  says  Robert  Baker,  vice  president  of 
product  management  for  Orthogon,  with  a  U.S. 
office  in  Waltham,  Mass. 

Each  radio  makes  use  of  multiple  transmitters 
and  receivers,  which  can  collect  the  reflections 
that  are  always  a  part  of  radio  transmissions  and 
recombine  them  to  optimize  throughput.  “It  lets 
us  combat  signal  fading  for  both  line-of-sight  and 
non-line-of-sight  links,  even  over  difficult  terrain," 
Baker  says. 

For  high-security  applications,  Orthogon’s  OS- 
Gemini  radios  can  run  with  an  optional  encryption 
scheme  that’s  based  on  the  128-bit  Advanced 
Encryption  Standard. 

The  new  converter  product,  called  OS-MUX,  can 
multiplex  two  or  fourTl-El  ports,  plus  Ethernet, 
and  then  send  it  over  wireless  bridges.  OS-MUX 
can  prioritize  TDM  traffic,  using  the  IEEE 
802.1p&Q  QoS  standards. 

Founded  in  Britain  in  2000,  Orthogon  has  $30  mil¬ 
lion  in  venture  fund  backing.  Rivals  in  the  unli¬ 
censed  wireless  bridge  market  include  Redline. 

Pricing  for  the  Orthogon  OS-Gemini  starts  at 
$11,995;  OS-Gemini  Lite  starts  at  $7,200.  OS-MUX, 
available  for  both  the  5.4GHz  and  5.8GHz  products, 
starts  at  $9,705.  ■ 
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MESSAGE  MANAGEMENT! 


The  corporate  messaging  landscape  is  changing.  New  threats  from  Instant  Messaging,  new 
requirements  for  message  archiving  and  compliance,  more  diverse  user  needs — all  demand  better 
solutions  for  securing  your  electronic  communications.  Introducing  Postini  Integrated  Message 
Management.  One  comprehensive,  flexible,  trusted  managed  service  that  protects  your  messages 
without  burdening  your  IT  infrastructure. 


TO  LEARN  MORE,  DOWNLOAD  A  FREE  WHITE  PAPER,  “SECURING  YOUR  ELECTRONIC  COMMUNICATIONS  WITH 
INTEGRATED  MESSAGE  MANAGEMENT,”  AT  WW.POSTINI.COM/NW1  ,  OR  CALL  US  AT  888.584.31 50. 
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ADVERTISEMENT 


Realizing  a  Dream  Data  Center  Design 

Using  Force  10  high-density  switch/routers,  Veritas’  IT  team  was  able  to  implement  the  simple,  scalable  design  they  desired. 


Processing  volumes  of  data  better,  faster  and 
cheaper  is  at  the  heart  of  Veritas  DGC's  value  propo¬ 
sition  to  its  customers  —  making  IT  strategic  to  the 
company's  competitiveness.  So  when  it  came  time  to 
upgrade  its  computing  clusters  from  Fast  Ethernet  to 
Gigabit  Ethernet  (GbE)  connections  (one  of  several 
cluster  interconnect  technologies  used),  the  IT  team 
knew  it  had  an  opportunity  to  design  a  network  core 
that  could  help  the  company  reduce  data  center  costs 
and  hone  its  competitive  edge  for  years  to  come. 


Veritas'  Global  Processing  Facility  in  its  Houston 
Headquarters  effectively  manages  the  extreme  compute 
demands  of  today’s  most  advanced  geophysical  processing. 
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Veritas,  headquartered  in  Houston,  Texas,  is  a  lead¬ 
ing  provider  of  integrated  geophysical  information 
and  services  to  the  petroleum  industry  worldwide. 
Among  its  services  are  seismic  survey  planning  and 
design,  seismic  data  acquisition,  and  the  processing, 
visualization,  and  archiving  of  3D  and  2D  data. 

Due  to  the  enormous  amount  of  processing  capac¬ 
ity  and  network  bandwidth  required  to  manipulate 
such  complex  data,  Veritas'  IT  infrastructure  is  key 
to  its  ability  to  generate  revenue.  Making  that  infra¬ 
structure  ever  more  efficient  is  a  challenge  for  IT. 
"We  have  to  be  able  to  drive  down  our  costs  so  we 
can  reduce  costs  to  customers,"  notes  Phil  Gaskell, 
Veritas'  Global  Network  Manager.  "If  we  can  deploy 
a  network  for  $3  million  as  opposed  to  $5  million, 
we  can  deliver  a  more  cost  effective  solution  and 
improve  our  bottom  line." 

When  IT  staff  brainstormed  about  what  the  ideal 
data  processing  facility  design  would  be,  it  became 
clear  they  wanted  fewer  layers  in  the  network.  "That 
was  our  dream  design  —  everything  taken  away,  with 
a  big  chuffing  switch  with  lots  of  ports  at  the  core," 
says  Doug  Northrup,  Veritas'  Houston  Manager  of 


Networks.  Forcel  0  Networks  was  the  only  vendor  that 
could  deliver  a  switch/router  with  the  port  density  and 
resiliency  Veritas  needed,  according  to  Northrup. 

Realizing  the  Dream  Core 

The  initial  challenge  facing  the  IT  team  was  to 
scale  the  network  core  in  each  data  processing  center 
to  accommodate  large  numbers  of  GbE  interfaces. 
But  the  team  also  wanted  a  network  design  that  was 
flexible  and  scalable  enough  to  accommodate  new 
technologies  and  traffic  flows  down  the  line.  Lack¬ 
ing  a  very  high  density  core  device,  other  networking 
vendors  proposed  designs  that  required  numerous 
inter-switch  links.  And  IT  would  have  had  to  build 
resiliency  into  the  network  through  redundant  devices, 
links  and  other  mechanisms. 

"That  design  would  have  cut  down  on  the  infra¬ 
structure's  scalability  and  increased  the  cost  and 
complexity,"  Northrup  says.  "You  end  up  using  more 
ports  to  connect  switches  together  than  you  do  for 
connecting  systems  to  switches.  And  instead  of  a 
non-blocking  core,  you  have  to  implement  an  over¬ 
subscribed  core." 

In  contrast,  Forcel  0's  E-Series  1200  switch/router 
scales  up  to  1260  GbE  or  224  10  GbE  ports  per 
chassis  and  features  a  non-blocking  switch  fabric.  The 
El  200  has  allowed  Veritas  to  eliminate  an  aggregation 
layer  from  its  network  architecture,  reducing  overall 
network  cost  as  well  as  latency.  "Don't  aggregate 
unless  you  have  to,"  Gaskell  advises.  "It  adds  costs 
and  inefficiencies." 

In  addition  to  high  port  density,  resiliency  is 
built  into  the  El 200.  All  E-Series  devices  have  fully 
redundant  components,  ensuring  hitless  failover  with 
no  packet  loss  in  the  event  a  component  fails.  The 
E-Series  also  has  a  fully  distributed  architecture  with 
independent  processors  for  switching,  routing,  and 


management,  which  allows  faults  to  be  contained. 
Because  resiliency  is  inherent  in  the  El  200,  Veritas' 
IT  team  didn't  have  to  build  these  capabilities  into  the 
network,  thus  lowering  their  operations  and  manage¬ 
ment  overhead. 

"The  El  200  is  a  very  well  designed,  redundant 
piece  of  machinery,"  Northrup  says.  Gaskell  concurs: 
"The  only  component  we  could  break  was  the  paint. 
I  can  sleep  well  at  night." 

The  Ultimate  Benefit:  Flexibility 

Veritas  currently  has  Forcel  0  E600s  and  El  200s 
deployed  in  its  Houston,  London,  and  Singapore  data 
centers.  Having  such  high-density  switch/routers  has 
allowed  IT  to  build  efficient,  high  bandwidth,  resilient 
data  center  back  ends  with  the  scalability  to  accom¬ 
modate  future  changes. 

And  by  allowing  Veritas  to  implement  a  simpler 
network  design,  the  El  200  has  enabled  IT  to  drive 
down  equipment  and  overhead  expenses.  Fewer 
devices  in  the  network  means  lower  power  con¬ 
sumption  and  cooling  costs,  for  example,  and  less 
management  overhead.  Northrup  notes  that  transi¬ 
tioning  to  Forcel  0's  equipment  was  "seamless,"  with 
virtually  no  learning  curve  for  the  staff. 

Above  all,  Forcel  0  has  given  Veritas  flexibility. 
"We're  always  pushing  the  edge  with  new  technolo¬ 
gies,"  notes  Gaskell.  "Flexibility  was  one  of  the  main 
things  we  were  looking  for.  We  don't  know  what's 
coming  around  the  corner  and  we  don't  want  to  lock 
ourselves  into  an  architecture.  Such  a  high  density 
core  gives  us  the  flexibility  to  explore  different  design 
options.  And  if  a  new  technology  comes  along,  or  the 
algorithms  or  traffic  flow  change,  we  wouldn't  have  to 
re-engineer  the  network  or  forklift  out  the  infrastruc¬ 
ture  with  Forcel  0." 


The  advanced  capabilities  of  Veritas’  Global  Processing  Facilities 
provide  customers  with  a  better  understanding  of  basin  and  reservoir  geology 
such  as  in  this  interpretation  of  the  subsurface  in  the  Gulf  of  Mexico. 


For  a  FREE  white  paper  on  the  Forcel 0  data  center  vision,  visit 

www.nww.com/2forcel0 
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Credit  Suisse  backs  utility  computing 


Offloading  the  work 


Credit  Suisse  says  Azui  Systems’  Compute  Appliance  will  help  it  move  to  a 
utility-computing  model  by  allocating  CPU  and  memory  to  applications  on 
demand.  Azul  virtual-machine  proxy  software  installed  on  existing  application 
servers  offloads  Java  processing  from  the  servers  to  the  appliance. 


Application  servers  running 
71  Azul  proxy  software 


Databases 


Azul  appliances 
(includes  a  backup) 


BY  JENNIFER  MEARS 

Credit  Suisse  is  buying  into  Azul  Systems’ 
idea  of  creating  pools  of  computing 
resources  to  support  processing-intensive 
Java  applications,  and  plans  to  install  the 
start-up’s  multi-core  systems  to  allocate 
resources  on  demand  across  its  data  cen¬ 
ters  worldwide. 

The  financial  services  company  in  Zu¬ 
rich,  Switzerland,  also  announced  earlier 
this  month  that  it  was  investing  in  Azul.  The 
financing,  the  amount  of  which  was  not 
disclosed, is  part  of  a  second  round  of  fund¬ 
ing  for  Azul,  which  closed  its  Series  A  round 
last  April.  Existing  investors,  which  include 
Accel  Partners,  Austin  Ventures,  Corn- 
Ventures,  RedFbint  Ventures  and  Worldview 
Technology  Partners,  also  participated  in 
the  round. 

“The  real  message  here  is  the  validation 
of  a  top  bank,” says  Scott  Sellers,  an  Azul  co¬ 
founder  who  is  the  company’s  CTO  and 
vice  president  of  hardware  engineering.“It’s 
all  about  bringing  network-attached  pro¬ 
cessing  to  Wall  Street.” 

Credit  Suisse  is  Azul’s  second  announced 
customer.  The  first  was  Pegasus  Solutions, 
which  provides  technology  and  services  to 
hotels  and  travel  distributors. 

Credit  Suisse  says  Azul  will  help  it  move  to 
a  utility  data-center  model  that  can  be 
accessed  by  a  variety  of  different  applica- 


Short  Takes 


■  Worldwide  server  revenue  rose 
in  2005  driven  largely  by  increased 
sales  of  x86-based  servers,  according 
to  figures  released  by  Gartner  and 
IDC  last  week.  Revenue  grew  4.5%  to 
$51.7  billion,  while  server  shipments 
grew  12.7%  to  7.6  million  units  from 
the  previous  year,  Gartner  says.  IDC 
estimates  revenue  grew  4.4%  to  $51.3 
billion,  while  shipments  grew  11.6%  to 
7  million  servers.  Although  the  two 
research  firms'  numbers  vary,  the 
overall  message  was  the  same: 
Lower-end  servers  based  on  x86 
microprocessors  from  Intel  and 
Advanced  Micro  Devices  continue 
+to  outpace  sales  of  midrange  and 
higher-end  enterprise  servers. 


tions.  With  the  Azul  Compute  Appliance, 
CPU  and  memory  resources  will  be  allo¬ 
cated  to  applications  according  to 
demand,  enabling  Credit  Suisse  to  charge 
internal  users  based  on  use  and  QoS,  exec¬ 
utives  say 

“Instead  of  something  that  is  purely  based 
on  physical  assets  such  as  the  purchase  of 


BY  DENI  CONNOR 

Adaptec  last  week  launched  software 
and  its  highest-capacity  network-attached 
storage  appliances  designed  for  small  and 
midsize  businesses. 

The  company’s  StorAssure  Personal 
Edition  software  allows  for  continuous 
backup  of  desktop  or  laptop  data  to  an 
Adaptec  Snap  Server  appliance.  The  Snap 
Server  500  Series  consists  of  three  new  1U- 
high  (1.75-inch)  NAS  boxes  with  a  maxi¬ 
mum  capacity  of  43.2TB  of  Serial  Advanced 
Technology  Attachment  (SATA)  drives  or 
26.4TB  of  Serial  Attached  SCSI  (SAS)  drives. 

StorAssure  wizards  simplify  configuration 
of  the  software  and  the  creation  of  backup 
jobs.  Rules  let  users  decide  the  types  of  files 
to  protect.  The  software  also  lets  users  save 
multiple  versions  of  files. 

When  a  user  is  disconnected  from  a  net¬ 
work,  changes  to  files  are  constantly 
logged.  When  the  user  reconnects,  changes 
are  saved  to  the  network  automatically  If  a 
laptop  is  lost  or  if  files  are  deleted  or  cor¬ 
rupted,  the  software  guides  the  user 


a  server,  we  move  to  virtualizing  the  physi¬ 
cal  resources  and  then  charge  back  based 
on  the  amount  of  [resources]  used,” says  an 
IT  technology  strategist  at  Credit  Suisse  in 
New  York  who  asked  not  to  be  named,  in 
accordance  with  company  policy  “So  if 
they  use  more  or  less  compute  power  or 
memory  we  can  charge  based  on  that  and 


The  Snap  Server  550  is  the  largest  of 
Adaptec’s  NAS  appliances,  with  a  maximum 
capacity  of  43.2TB. 

through  the  recovery  process. 

Backup  of  laptop  and  desktop  data  has 
not  been  a  priority  for  SMBs,  analysts  say. 
According  to  the  Enterprise  Storage  Group, 
SMB  data  is  growing  at  60%  to  100%  annu¬ 
ally  IDC  reports  that  more  than  half  of  SMBs 
do  not  back  up  their  client  data. 

The  Snap  Server  500  Series  consists  of  the 
510,520  and  550  appliances,  each  of  which 
is  configured  with  redundant,  hot- 
swappable  power  supplies  and  AMD 
Opteron  processors  for  its  storage  con¬ 
troller.  The  appliances  connect  to  a  net¬ 
work  via  redundant  Gigabit  Ethernet 


also  based  on  [QoS] .  It  allows  us  to  make 
sure  that  applications  [consumers]  are  pay¬ 
ing  appropriately  for  their  use  of  IT 
resources.” 

Azul’s  11U  Compute  Appliance,  which 
began  shipping  last  June,  is  built  on  a  cus¬ 
tom-designed  processor  with  24  processing 
cores.The  system  comes  with  between  four 
and  16  processors,  meaning  customers  can 
get  as  many  as  384  cores  and  as  much  as 
256GB  of  memory  in  a  box.  That  pool  of 
processors  and  memory  can  be  allocated 
on  demand  to  handle  Java  workloads  that 
are  offloaded  from  existing  application 
servers. 

The  Compute  Appliance  becomes  an 
extension  to  existing  environments;  no 
modification  is  needed  to  applications  or 
hardware  architecture,  the  IT  technology 
strategist  says.The  only  change  is  that  proxy 
software  is  installed  on  application  servers 
directing  them  to  send  Java  processing  to 
the  Azul  appliance.  A  management  tool  lets 
users  set  business  rules  and  priorities  to 
control  how  much  processing  power  is 
assigned  to  each  application.  ■ 


adapters.  All  three  NAS  boxes  support 
RAID  Level  0,  Level  1  and  Level  5  for  fault 
tolerance  and  are  managed  via  Snap 
Server  Manager  software. 

The  510,  which  uses  SATA  drives,  has  a 
capacity  ranging  from  512MB  to  4GB.  The 
520  uses  SATA  and  SAS  drives  and  has  a 
capacity  ranging  from  IT  to  26TB.  The  550 
also  uses  SATA  and  SAS  drives  and  scales  to 
43.2TB. 

Adaptec  bundles  CA  eTrust  anti-virus  and 
BakBone’s  NetVault  backup  software  with 
the  Snap  Servers.  NetVault  contains  virtual 
tape-library  capability  allowing  customers 
to  deploy  disk-to-disk  or  disk-to-disk-to-tape 
backup. 

StorAssure  costs  $36  per  Windows  client. 
It  works  with  versions  of  Windows  ranging 
from  ME  though  XP  Service  Pack  2  and 
Windows  2003.The  Snap  Server  510  starts  at 
$3,600;  the  520  starts  at  $4,600;  and  the  550 
starts  at  $10,000. 

The  company’s  Snap  Servers  compete 
with  NAS  offerings  from  Dell,  HP  IBM  and 
Sun  (formerly  Procom).R 


Adaptec  rolls  out  storage  for  SMBs 
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IBM  takes  aim  at  information  mgmt 


BY  SHELLEY  SOLHEIM,  IDG  NEWS  SERVICE 

IBM  is  placing  a  $1  billion  bet  that  helping 
businesses  better  manage  and  glean  in¬ 
sights  from  their  data  will  be  a  profitable 
software  and  services  business. 

The  company  announced  last  week  that 
its  software  business  will  develop  more  ad¬ 
vanced  information  management  software, 
and  the  number  of  consultants  dedicated 
to  information  management  services  will 
grow  from  15,000  to  nearly  25,000. 

“Any  data,  any  format,  anywhere,  and  at 
scale,”  was  the  mantra  voiced  by  Steve 
Mills, senior  vice  president  and  group  exec¬ 
utive  for  IBM  Software.  “It’s  all  about  the 
quantity  of  data  and  the  speed  at  which 
you  need  to  get  it.” 

IBM  provided  details  on  a  range  of  new 
software  and  services  geared  toward  im¬ 
proving  information  management.  On  the 
services  side,  IBM’s  Business  Consulting 
Group  has  rolled  out  a  half-dozen  new 
offerings  that  target  such  challenges  as  ana¬ 
lytics,  risk  and  compliance. 

On  the  software  side,  IBM  discussed  two 
products  that  incorporate  technology 
gained  during  its  software-vendor  shopping 
spree  last  year.  The  first,  WebSphere 


Information  Server,  uses  technology  from 
software-maker  Ascential,  which  IBM 
acquired  last  March.  Information  Server 
combines  the  information-integration  capa¬ 
bilities  of  IBM’s  WebSphere  Data  Integration 
Suite  and  the  federation  functionality  of 
WebSphere  Information  Integrator  with  a 
new  service-oriented  architecture  service 
publishing  capability  With  it,  businesses  can 
pull  data  together  from  a  variety  of  feder¬ 
ated  sources,  Mills  says.  It  is  set  to  be  avail¬ 
able  in  the  second  quarter  of  2006. 

The  second  product,  WebSphere  Content 
Discovery  Server,  is  search  software  based 
on  technology  from  e-commerce  search- 
technology  developer  iPhrase,  which  IBM 
acquired  last  November.  IBM  is  offering  the 
tool  in  different  flavors  geared  for  online 
shopping  sites,  contact  centers  and  self-ser¬ 
vice  portals.The  software  uses  content  inte¬ 
gration,  search,  semantic  analysis  and  con¬ 
textual  information  to  interpret  the  under¬ 
lying  meaning  of  online  inquiries  and  to 
make  recommendations  based  on  those 
interpretations. 

Globalization,  mergers  and  regulatory 
compliance  are  among  the  chief  drivers  for 
businesses  seeking  to  manage  information 


better,  IBM  said. 

One  company  uses 
IBM  software  to  analyze 
data  on  Medicaid 
claims,  which  could  save 
money  for  taxpayers  in 
New  York.  The  Medicaid 
program  is  the  New  York 
counties’  most  expensive 
program,  said  Scott 
Vanderhoef,  county 
executive  for  Rockland 
County.  “Just  for  Rock¬ 
land  County  alone,  we 
spend  over  $1  million  a 
day  on  this  one  pro¬ 
gram,”  he  said. 

For  a  pilot  program 
that  looked  for  aberra¬ 
tions  in  provider  claims 
during  a  21-month  pe¬ 
riod,  IBM  provided  its 
own  Fraud  and  Abuse 
Management  System  software  as  a  service 
to  the  county  and  ran  the  claims  through 
its  supercomputer. 

Of  the  claims  evaluated  in  the  pilot, 
almost  half  were  questionable.  If  those  were 


resolved  successfully, 
Vanderhoef  estimates, 
the  county  might  be 
able  to  recover  nearly 
$13  million. 

Now  that  the  data  has 
been  collected,  the 
next  step  for  the  county 
is  how  to  reap  the 
potential  savings  from 
it.  “Now  the  question 
becomes,  who  is  going 
to  do  the  footwork  to 
walk  into  these  places 
and  do  forensic  audits 
to  check  which  are 
fraud,"  he  said. 

Vanderhoef  said  IBM 
is  also  developing  soft¬ 
ware  that  could  allow 
New  York  state  to  spot 
aberrations  in  claims 
before  they  are  paid 
out.  “You’re  talking  about  mining  and  har¬ 
vesting  information  that  has  always  been 
there  and  using  it  to  actually  change  how 
you  do  business,  in  this  case  to  save  money 
for  taxpayers, ’’Vanderhoef  said.  ■ 


Rockland  County  could  save  New 
York  taxpayers  $13  million  with  the 
use  of  IBM's  software,  says  Scott 
Vanderhoef,  county  executive. 


Orwell  did  not  guess  the  worse  half  of  it 


Scott  Bradner 

It  has  become  a  cliche  to  bring 
up  George  Orwell’s  1948  book 
1984  when  talking  about  the  ever- 
increasing  pervasiveness  of  gov¬ 
ernments  monitoring  the  activi¬ 
ties  of  their  citizens  in  the  name  of 
security.  But  Orwell’s  apocalyptic 
picture  of  a  quiet  dehumaniza¬ 
tion  missed  entirely  the  most  im¬ 
portant  threat  to  our  privacy  and 
sense  of  being. 

Orwell  painted  a  picture  of  a 
world  where  government  has  the 
ability  to  monitor  everyone,  every¬ 
where  (www.nww.com,  DocFinder 
23601 :  Individuals  never  know 


when  they  are  under  surveillance, 
so  tend  always  to  act  as  if  they  are. 

The  most  recent  reason  to  in¬ 
voke  Orwell  was  presented  by 
Harold  Hurtt,  chief  of  police  in 
Houston,  who  suggested  that 
police-run  surveillance  cameras 
in  public  places  did  not  go  far 
enough  and  [said]  that  owners  of 
malls  and  large  apartment  com¬ 
plexes  should  be  required  to 
install  such  cameras  as  well.  If  that 
was  not  enough  to  set  off  us  civil- 
liberties  types,  he  also  said  that  in 
some  cases  surveillance  cameras 
should  be  set  up  to  monitor  pri¬ 
vate  residences. 

Hurtt  proposed  expanding  the 
number  of  police-run  surveil¬ 
lance  cameras  to  help  deal  with  a 
shortage  of  police  officers.  It  is 
hard  to  argue  that  it  would  not 
make  things  easier  for  the  police  if 


they  could  record  everything 
everyone  did  and  could  track  rob¬ 
bers  back  to  when  they  took  the 
gun  used  in  a  robbery  out  from 
under  the  bedroom  pillow  in  the 
morning.  Not  the  kind  of  world  I’d 
like  to  live  in,  but  more  convenient 
for  the  police. 

As  one  might  expect,  the  chief 
dismissed  any  privacy  concern  by 
saying,  “If  you  are  not  doing  any¬ 
thing  wrong,  why  should  you 
worry  about  it?” 

This  response  has  been  used 
recently  by  the  Bush  administra¬ 
tion  in  defense  of  the  National 
Security  Agency  wiretapping 
and  one  that  emphasizes  the  dis¬ 
connect  between  the  viewers 
and  the  viewed.  My  guess  is  that 
almost  no  one  who  says  this 
would  be  happy  to  have  the 
tables  turned  to  let  citizens 


watch  politicians’  private  lives. 

What  Orwell  did  not  figure  out  is 
that  most  places  —  including 
most  of  the  places  Hurtt  wants  to 
monitor  —  are  already  under 
watch.  It  is  hard  to  walk  more  than 
a  few  feet  inside  a  mall  or  major 
corporate  building  without  being 
recorded  by  a  security  camera. 
Many  homeowners  have  installed 
security  or  nanny  cameras. We  are 
recorded  in  many  —  soon,  maybe 
most  —  places  we  go. 

More  pervasive  are  corporate 
databases  that  record  everything 
you  buy  read  or  do.  Phone  com¬ 
panies  and  automatic  toll  systems 
know  where  you  go,  Google  and 
Yahoo  know  what  you  want  to 
look  at,  The  New  York  Times  and 
other  online  news  sources  know 
what  you  read,  and  your  local 
market  knows  what  you  want  to 


eat.  In  the  future,  RFIDs  will  make 
this  data  collection  and  linkage 
easier  (for  a  Yiew  of  that  future, 
see  DocFinder  2361). 

Orwell  missed  the  fact  that 
much  of  the  privacy  threat  would 
come  from  the  private  sector, 
where  there  are  few  meaningful, 
legally  mandated  controls.  It  will 
be  up  to  government,  however,  to 
decide  if  we  need  to  accept  the 
current  fact  that  we  have  no  pri¬ 
vacy  and  have  to  “get  over  it.” 

Disclaimer  Harvard,  like  other 
schools,  does  have  laws  protect¬ 
ing  privacy  at  least  for  students. 
But  the  above  call  for  more  rules 
is  mine,  not  the  university’s. 

Bradner  is  a  consultant  with 
Harvard  University's  University 
Information  Systems.  He  can  be 
reached  at  sob@sobco.com. 
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THE  INTERNET  H  VPNS  ■  INTEREXCHANGES  AND  LOCAL  CARRIERS  H  WIRELESS  ■  REGULATORY  AFFAIRS  E  CARRIER  INFRASTRUCTURE 


Both  sides  have  a 
point  in  net  neutrality 


Last  week  we  brought  up  some  of  the 
most  critical  telecom  policy  issues  for  2006. 
Top  of  the  list  is  net  neutrality.  Congress 
started  hearings  on  the  topic  a  few  weeks 
back,  and  both  telcos  and  content  pro¬ 
viders  are  lobbying  hard. 

There  are  two  main  camps  —  call  them 
“pay  for  use”and  “equal  access.’The  pay-for- 
use  folks  —  chiefly  telcos  —  argue  that  dif¬ 
ferent  types  of  traffic  differentially  affect  the 
network,  and  they  should  therefore  be  able 
to  charge  for  higher-impact  traffic,  the  same 
way  postal  services  charge  more  to  ship  10- 
pound  packages  than  2-ounce  letters,  and 
more  for  guaranteed  overnight  delivery 
than  best-effort  service.  Similarly,  highway 
tolls  are  higher  for  18-wheelers  than  a  fam¬ 
ily  Toyota. 

Equal-access  folks  —  chiefly  the  content 
providers  such  as  Google  and  Yahoo  —  say 
telcos  shouldn’t  discriminate  based  on 
what  the  traffic  is  or  where  it’s  headed.  The 


Short  Takes 


■  XO  Communications  last  week 
expanded  the  reach  of  its  business 
VoIP  services  to  small  and  midsize 
businesses  with  large  offices.  The  ex¬ 
pansion  broadens  the  market  for 
XOptions  Flex  service  by  making  it 
available  to  businesses  with  as  many 
as  160  employees  at  each  location  — 
a  market  that  XO  says  spans  more 
than  4  million  businesses  nationwide 
and  spends  $50  billion  annually  on 
telecom.  The  extended  service  is  avail¬ 
able  in  Chicago,  Dallas,  Fort  Lauder¬ 
dale,  Miami,  Minneapolis/St.  Paul, 
Orlando,  San  Francisco  and  Tampa/St. 
Petersburg/Sarasota.  It  will  be  avail¬ 
able  nationwide  by  summer. 


argument  is  that  postal  services  don’t 
charge  more  to  carry  your  mortgage  pay¬ 
ment  than,  say  a  birthday  card.  By  analogy 
telcos  have  no  right  to  charge  more  for 
Google  clicks  or  eBay  hits. 

Who’s  right?  Both  are.  Certain  types  of  traf¬ 
fic  —  voice,  video  and  some  interactive 
applications  —  do  stress  the  network  more 
than  others,  and  this  impact  is  particularly 
severe  at  last-mile  broadband  links,  where 
congestion  is  most  likely  Yet  having  telcos 
prioritize  some  Web  sites  over  others  not 
only  destroys  the  innovative  any-to-any 
nature  of  the  Internet  but  also  runs  counter 
to  several  centuries  of  historical  de  facto 
net  neutrality 

Take  postal  services:  Ben  Franklin 
launched  one  of  the  first,  to  distribute  his 
Philadelphia  newspaper  to  readers  in 
Boston  and  New  York.  Even  though  his  ser¬ 
vice  would  also  carry  mail,  he  refused  to 
carry  papers  for  competing  publishers  — 
early  precedent  for  service  providers  exer¬ 
cising  control  over  content  distribution. 

But  that  first  precedent  was  pretty  much 
the  last.  Once  the  postal  service  became 
government-regulated,  the  rules  changed, 
and  even  unregulated  services  (such  as 
FedEx)  abide  by  them.  Today  the  effective 
policy  is  equal  access  combined  with  pay 
per  use: The  post  office  can’t  refuse  to  carry 
ads  for  FedEx,  but  it  can  charge  more  for 
heavier  boxes  and  overnight  guarantees. 
Similarly  traditional  telcos  can’t  charge  you 
more  to  gossip  with  your  sister  than  to 
place  trades  with  your  broker,  but  they  are 
free  to  charge  more  for  longer  calls  or 
those  placed  to  far-off  geographies. 

These  examples  point  the  way  toward  a 
workable  compromise  for  net  neutrality 
Google  and  Yahoo  are  right  to  insist  that  the 
telcos  not  charge  differently  for  traffic  to 
their  sites.  The  telcos  do  have  the  right  to 
charge  more  for  traffic  types  that  stress  the 
network.  In  other  words,  telcos  should  be 
able  to  charge  higher  rates  for  VoIP-grade 
Internet  access  —  which  consumers  are 
free  to  purchase  or  decline  —  but  not  for 
the  use  of  specific  services  such  as  Vonage, 
or  for  access  to  sites  such  as  Google. 

Johnson  is  president  and  senior  founding 
partner  at  Nemertes  Research,  an  indepen¬ 
dent  technology  research  firm.  She  can  be 
reached  at  johna@nemertes.com. 


Service  provider  Netifice 
to  acquire  MegaPath 


BY  DENISE  PAPPALARDO 

Netifice  and  MegaPath,  two  companies 
that  offer  secure  broadband  services  to  cor¬ 
porations  with  thousands  of  sites,  are  join¬ 
ing  forces. 

Netifice  is  acquiring  MegaPath  for  stock 
and  cash.  Financial  details  were  not 
disclosed. 

“Both  of  our  companies,  management 
and  investors,  have  been  looking  for  ways 
to  scale  the  business  and  establish  more 
reach  in  the  market,”  says  Craig  Young,  CEO 
at  Netifice.  He  says  Netifice  began  its  search 
for  a  partner  about  five  months  ago  and 
that  talks  began  heating  up  with  MegaPath 
about  one  month  ago. 

“We  had  absolute  agreement  between 
our  investors  and  management  that  putting 
these  two  companies  together  would  ere 
ate  a  powerhouse  in  the  industry  of  man¬ 
aged  IP  services, ’’Young  says. 

The  joined  companies  are  expected  to 
bring  in  about  $125  million  annually 

MegaPath  has  far  more  customers,  with 
14,000  under  its  belt,  but  only  about  half  of 
those  are  large  enterprises.  Netifice  has 
2,000  customers,  which  the  company  says 
all  are  midsize  and  large  businesses. 

Both  companies  offer  IP  VPN  services,  but 
MegaPath  only  offers  managed  IP  VPN  ser¬ 
vices  based  on  IPSec.  Netifice  offers  MPLS- 
and  SSL-based  IP  VPN  services.  Netifice 
acquired  the  latter  service  from  Aventail 
just  over  a  year  ago.  That  deal  included 
Aventail’s  Managed  SSL  VPN  Services  busi¬ 
ness  unit,  including  120  customers,  85  em¬ 
ployees  and  network  assets. 

Young  says  the  companies  have  little 
overlap  and  offer  complementary  services 
including  MegaPath’s  managed  firewall, 
anti-spam  and  anti-virus  services  and 
Netifice’s  planned  VoIP  service  rollout. 

Netifice  is  testing  a  new  VoIP  offering  with 
customers  including  Doctor’s  Associates, 
the  franchiser  of  Subway  restaurants. 

“We  are  looking  at  potential  VoIP  cost  sav¬ 
ings  in  our  retail  environment,” says  Marina 
O’Rourke,  director  of  retail  technology  at 
the  Milford,  Conn.,  sandwich  franchiser, 
which  has  25,000  restaurants  worldwide. 

“Now  with  the  additional  resources  and 
capital  MegaPath  brings,  Netifice  will  be  in 
a  better  position  to  deploy  and  support 
large-scale  networks,”  she  says. 

O’Rourke  says  Subway  has  been  using 


A  look  at  the 
two  companies 


■  Company: 

MegaPath 

Location: 

Pleasanton,  Calif. 

Founded: 

1999,  privately  held 

Business: 

Managed,  secure 
remote-access  services 
for  businesses. 

CEO: 

Brian  Service 

Customers: 

14,000 

Investors 

include: 

■  Company: 

Austin  Ventures, 

GM  Capital 

Partners,  Trident 

Capital 

Netifice 

Communications 

Location: 

Costa  Mesa,  Calif. 

Founded: 

1996,  privately  held 

Business: 

Managed,  secure  IP 
VPN  services  for 
businesses. 

CEO: 

Craig  Young 

Customers: 

2,000 

Investors 

include: 

Netifice  services 

Boston  Millennia 
Partners,  Dolphin 

Equity  Partners, 

FUG  Capital 

to  support  its  Subway 

Retail  Network  since  2004.“The  acquisition 
makes  me  feel  like  we  made  the  right 
choice  when  we  selected  Netifice,”  she 
says.  About  1,000  franchisees  are  using  the 
service  today  and  another  1 ,000  are  slated 
to  come  on  line  this  year. 

Netifice  touts  other  customers  such  as 
The  Leather  Factory,  MortgagelT  and 
Thomson  Prometric.  MegaPath’s  customer 
list  includes  Jenny  Craig,  Radio  Shack  and 
insurance  company  UnumProvident. 

The  combined  companies  will  have 
about  400  employees,  Young  says.  He  will 
stay  on  as  CEO.  Brian  Service,  CEO  at  Mega- 
Rath  says  he  will  be  leaving  after  the  deal 
closes. 

The  merger  is  expected  to  close  in  April, 
pending  California  state  and  shareholder 
approval.  Young  says  he  expects  a  positive 
cash  flow  by  2007.  ■ 
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SMBs:  Outsourcing  a  growth  tool 


BY  JENNIFER  MEARS 

Encharter  Insurance,  in  Lexington,  Mass., 
prides  itself  on  its  hometown  appeal.  That 
feel  for  the  neighborhood  has  contributed 
to  its  rapid  growth  —  Encharter  doubled  in 
size  in  the  last  few  years,  to  55  employees 
and  about  $8  million  in  revenue. 

But  while  business  boomed,  like  many 
small  companies  Encharter  paid  little 
attention  to  developing  an  IT  strategy  to 
support  expanding  technology  demands. 

“I  came  into  this  job  and  found  that  there 
was  no  IT  department,”  says  Michael  Sher, 
who  last  year  was  named  president  and 
CEO  of  the  group  of  seven  insurance  agen¬ 
cies  in  Massachusetts  and  Connecticut. 

He  started  looking  for  outside  help,  a  mav¬ 
erick  decision  for  the  head  of  a  small  com¬ 
pany  Most  small  and  midsize  businesses 
are  reluctant  to  hand  over  IT  functions  to 
outsourcers,  in  large  part  because  SMBs 
lack  familiarity  with  the  idea  of  outsourc¬ 
ing  and  fear  they  will  lose  control. 

In  addition,  while  some  smaller  outsourc¬ 
ing  vendors  such  as  CenterBeam  and  Ever- 
dream  have  built  their  businesses  by  focus- 


■  IBM  plans  to  ship  a  new  version  of  its 
Tivoli  Identity  Manager  software 
designed  for  small  and  midsize  busi¬ 
nesses.  Tivoli  Identity  Manager 
Express  will  be  a  slimmed-down  ver¬ 
sion  of  the  product  that  can  be  used  by 
a  maximum  of  5,000  users,  Tivoli  says. 
Tivoli  Identity  Manager  typically  is  used 
by  very  large  companies  to  manage 
user  names  and  passwords,  and  audit 
user  activity.  The  Express  version  of  the 
product  will  have  fewer  customization 
features  than  its  corporate  counterpart, 
but  it  also  will  be  easier  to  install  and 
manage.  The  software  will  come  with 
five  pre-conf igured  templates  to  help 
administrators  manage  accounts  and 
permissions,  managers  and  other  types 
of  users.  Identity  Manager  Express  is 
scheduled  to  ship  on  Feb.  28,  and  will  be 
priced  at  $24  per  user. 

■  VoIP  start-up  Whaleback 
Systems  is  offering  a  flat-fee 


ing  on  SMBs,  big-name  providers  such  as 
Electronic  Data  Systems  and  IBM  have  yet 
to  carve  out  a  niche  in  the  low  end  of  the 
market,  creating  a  supply-side  issue  that  is 
holding  back  more  widespread  demand, 
analysts  say 

Gartner  estimates  that  about  90%  of  all 
new  businesses  created  in  the  United  States 
are  in  the  SMB  sector.  It’s  a  huge  opportu¬ 
nity  for  outsourcers  as  these  small  firms 
begin  to  recognize  that  they  can  achieve 
the  same  benefits  that  large  organizations 
enjoy  when  they  hand  over  non-core  IT 
functions  to  outside  service  providers. 

“There  is  a  small  but  growing  legion  of 
SMBs  that  are  considering  outsourcing,” 
says  Robert  Brown,  a  research  director  at 
Gartner.  He  notes  that  the  base  is  small: 
Companies  with  100  to  499  employees  now 
account  for  just  7.8%  of  the  $50.5  billion 
business-process  outsourcing  market,  but 
that  number  is  expected  to  grow  to  more 
than  8%  of  a  $78.8  billion  market  by  2009, 
according  to  Gartner. 

“For  most  SMBs,  there  is  an  unfamiliarity 
with  outsourcing  that  dictates  that  when 


phone  service  that  includes  phones, 
an  IP  PBX  and  unlimited  calling  to  any 
phone  in  the  United  States.  Designed 
for  businesses  with  as  many  as  1,500 
phones,  the  service,  called  Crystal- 
Blue,  is  built  around  the  SMB  1500,  an 
IP  PBX  that  Whaleback  built  using  its 
own  code  to  supplement  software  the 
company  purchased  from  several 
other  vendors.  Customers  who  buy  the 
service  first  get  an  analysis  of  their 
current  phone  bill  compared  with  what 
they  would  pay  for  Whaleback's  ser¬ 
vice,  the  company  says.  Whaleback 
charges  an  installation  fee,  and  cus¬ 
tomers  buy  the  PBX  and  the  phones, 
which  are  made  by  Polycom.  For  an 
office  with  fewer  than  10  phones,  the 
setup,  configuration  and  training  is 
priced  at  $1,000  for  the  PBX  and  $300 
for  each  phone.  For  offices  with  more 
than  10  phones,  the  price  of  the  PBX 
increases  to  $2,500.  The  phone  price 
stays  the  same. 


they  make  technology  buying  decisions, 
the  first  thing  they  are  going  to  think  about 
is  buying  hardware  and  software,  and  then 
trying  to  integrate  those  through  internal  re¬ 
sources  and  staff,  as  opposed  to  turning  to 
an  outsourcer  to  help,”  Brown  says. 

Sher  says  when  he  left  Plymouth  Rock 
Insurance  about  a  year  ago  to  run  its  sub¬ 
sidiary  Encharter,  he  could  hardly  believe 
the  IT  situation. 

“The  offices  weren’t  networked.  And  it 
was  all  supported  by  one  guy  and  if  he  was 
sick  our  whole  system  could  be  down.  He 
was  also  charging  us  for  travel  between  the 
seven  offices  in  two  states,”  Sher  says.  En¬ 
charter  last  year  turned  over  the  bulk  of  its 
IT  infrastructure,  including  its  Microsoft  Ex¬ 
change  servers,  to  CenterBeam. 

“Now  we  have  nightly  backups.  We  have 
servers  that  are  in  a  Class  1  data  center.  We 
have  all  the  things  that  you  would  want  a 
growing  insurance  agency  with  aspirations 
for  further  acquisitions  and  expansion  to 
have,”  Sher  says. 

The  small  company  had  to  invest  in  up¬ 
graded  hardware  such  as  routers  and  T-l 
lines  to  take  advantage  of  remote  service, 
but  that  investment  paid  off.“We  have  prob¬ 
ably  cut  our  IT  costs  in  half,”  he  says. 

In  addition,  Sher  says  Encharter  now  has 
the  kind  of  technology  support  it  needs 
to  continue  to  grow.  It’s  a  growth-by¬ 
acquisition  strategy  of  the  kind  that  is  push¬ 
ing  other  SMBs  to  look  at  outsourcers, 
including  offshore. 

Kitcoff-APSI,  a  consulting  and  administra¬ 
tion  firm  that  focuses  on  full-service, 
employer-sponsored  retirement  plans,  is 
using  Indian  offshore  provider  Patni  to 
buoy  its  numerous  acquisitions.  Michael 
Campo,  founder  of  the  Coral  Gables,  Fla., 
company  says  outsourcing  is  the  key  to  his 
business  model. 

“1  needed  to  lower  my  labor  costs,”  he 
says.  “Once  I  bought  holistically  into  the 
idea  of  outsourcing,  I  could  then  acquire 
another  firm  and  completely  take  over  its 
entire  book  of  business  and  outsource  it 
to  India  without  absorbing  any  of  their 
labor  cost  mistakes.”  Patni  handles  record¬ 
keeping  tasks  associated  with  the  admin¬ 
istration  of  Kitcoff-APSI’s  defined-contribu- 
tion  plans. 

Campo  says  outsourcing  can  be  a  tough 
decision  for  any  company  large  or  small. 
“The  problem  is,  inherently  a  small- 
business  owner  has  even  more  reservations 


Letting  go 

More  small  and  midsize  businesses 

are  starting  to  look  at  outsourcers 

for  cost  savings  and  competitive 

advantage.  But  hurdles  still  remain: 

Challenges: 

•  Fear  of  the  unknown. 

•  Lack  of  focus. 

•  Pushy  providers. 

•  Unclear  objectives. 

Strategies: 

•  As  with  any  investment,  do  your  due  diligence 
but  also  try  to  get  a  trial  run.  With  today's 
remote-access  technology,  any  outsourcer 
looking  for  business  should  be  able  to  give  you 
a  test  run  for  free. 

•  Figure  out  what’s  core  to  your  business  and 
then  outsource  what's  not,  preferably  starting 
small. 

•  Don't  let  service  providers  sell  you  on  new 
technology  or  services  you  don't  need.  Stay 
focused  and  know  what  you  want  before  signing 
anything, 

•  Make  sure  you're  aware  of  internal  benchmarks 
and  service  performance  before  outsourcing 
so  you  have  parameters  by  which  to  judge 
success  or  failure. 


because  [the  company]  ishis,”hesays.“But 
there  are  many  ways  to  mitigate  those 
fears.”  One  is  to  completely  embrace  the 
concept  of  outsourcing,  Campo  says. 

“My  business  model  is  completely  im¬ 
mersed  now  in  the  concept  of  outsourcing 
the  heavy  lifting  to  Patni,”  Campo  says.The 
strategic  advantage  —  customer  service  — 
remains  in-house. 

Henry  Svendblad,  vice  president  of  IT  at 
Millennium  Partners  Sports  Club  Manage¬ 
ment  in  Boston,  also  was  looking  for  a  way 
to  offload  non-core  IT  headaches.  He  out¬ 
sourced  the  company’s  IT  functions  to 
CenterBeam  in  December,  just  a  month 
after  coming  on  board. 

“As  I  looked  at  our  IT  strategy,  I  realized  I 
could  dedicate  most  of  my  time  to  building 
an  IT  infrastructure  and  then  try  to  build 
our  business  systems  from  scratch.  Or  I 
could  let  CenterBeam  focus  on  our  infra¬ 
structure  and  focus  all  of  my  energies  on 
our  business  systems,  where  I  can  really 
add  value,”  he  says.  ■ 
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Complete  network  visibility. 

Dthing's  more  frustrating  than  the  phrase 
bring  in  my  wireless  router  from  home." 
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To  learn  more  about  these  products  and  visit  our 
Wireless  Lifecycle  Management  Solution  Center,  go 
to  www.flukenetworks.com/wireless. 
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Introducing  Interpreter™  WLAN  Survey  and 
EtherScope™  Wireless  Network  Assistant  — 
everything  you  need  to  plan,  install,  troubleshoot  and 
manage  your  network.  An  efficient,  secure  and  effective 
wireless  network  doesn't  just  happen.  It  requires  a  good 
deal  of  pre-deployment  planning,  careful  installation, 
effective  troubleshooting  and  prudent  management.  That's 
why  we  offer  two  powerful  products.  InterpretAir  software 
reduces  overall  deployment  cost  by  carefully  mapping 
optimal  access  point  placement  using  graphical  site 
maps.  As  for  EtherScope  Wireless,  it's  the  first  802.11 
a/b/g  wireless  and  gigabit  wired-side  analysis  tool  that's 
compact  and  easy  to  carry  with  you.  Two  network  tools 
that  are  not  only  indispensable  for  planning  and  deploy¬ 
ment,  but  for  spotting  security  risks,  too.  Including  those 
created  both  innocently  and  not-so-innocently. 
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TECHHOUMiY  UPDATE 

AN  INSIDE  iMK  AT  TECHNOLOGIES  AND  STANDARDS 


Risk-discovery  engines  mitigate  threats 


HOW  IT  WORKS:  Risk-discovery  engine 

A  content-monitoring  appliance  uses  a  risk-discovery  engine  to  peer  into  all 
content  flowing  through  a  network  and  identify  threats. 


Inbound  capture  g 
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Outbound  capture 
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Real-time  alerts  and  trends 

Content-monitoring  appliance, 
with  risk-discovery  engine 
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Q  A  content-monitoring  appliance  captures  and  reconstructs  inbound  and  outbound  datastreams. 

B  The  risk-discovery  engine  provides  real-time  classification,  analysis  and  threat  alerts  via  user- 
configurable  rule  and  policy  creation.  Appliance  notifies  users  of  violations. 

B  Risk-discovery  engine  writes  full  context  of  real-time  incidents  and  content  that  didn't  trigger  filters 
to  a  relational  database  and  file  system  storage  to  fulfill  queries  from  forensic  investigators. 


BY  KEVIN  CHEEK 

Most  companies  are  not  prepared  for  the 
CEO’s  worst  nightmare:  insiders  disseminat¬ 
ing  sensitive  data  electronically.lt  only  takes 
one  insider  to  expose  a  company’s  most 
vital  assets,  destroying  its  brand,  reputation 
and  shareholder  value. 

Network  content-monitoring  hardware 
appliances  equipped  with  risk-discovery 
engines  can  provide  visibility  into  the 
data  entering  and  leaving  a  network. 
They  can  help  enterprises  protect,  for 
example,  customer  data  and  intellectual 
property,  and  help  organizations  comply 
with  regulations. 

Risk-discovery  engines  passively  monitor 
inbound  and  outbound  traffic  at  wire 
speed,  flowing  over  a  network  regardless  of 
protocol  or  port.TCP  flows  are  captured,  re¬ 
assembled  and  analyzed  in  real  time  to 
identify  threats  and  send  alerts. 

Pre-defined  and  custom  policies  that 
perform  pattern  matching  can  be  applied 
to  traffic  to  identify  information.  An 
engine  also  can  be  configured  to  store 
traffic  that  violates  policies,  as  well  as  traf¬ 
fic  that  does  not  trigger  them,  and  can 
make  the  latter  available  for  querying  over 
historical  datastreams. 

Content-traffic  profiles  and  business 
and  IT  stakeholder  dashboards  are  pre¬ 
sented  through  a  secure  browser  con¬ 
nection  to  provide  an  incident’s  context. 
An  administrator  or  user  with  role-based 
permission  can  view  original  content, 
such  as  a  PDF  and  its  associated  trans¬ 
mission  metadata,  such  as  source  and 
destination  IP  and  user. 

One  example  would  be  Social  Security 


numbers  leaked  via  an  outbound  e-mail. 
A  risk-discovery  engine  would  detect  the 
Social  Security  numbers  in  the  e-mail 
and  alert  security  and  compliance  per¬ 
sonnel.  It  could  then  reveal,  for  example, 
that  the  data  was  being  e-mailed  in  error 
reports  generated  by  a  misconfigured 
application  server. 

IT  personnel  could  reconfigure  the 
application  server  and  firewall  to  stop 
outbound  e-mail  from  unauthorized 
mail  gateways. 


As  TCP  flows  were  reconstructed,  the  risk- 
discovery  engine  would  identify  the  proto¬ 
col  and  content  type.  Even  if  the  protocol 
was  unknown,  the  risk-discovery  engine 
would  continue  to  scan  until  it  identified 
the  content  object.  For  example,  “port- 
agnostic”  support  means  no  content  trans¬ 
mission  would  be  missed  if  SMTP  e-mail 
was  sent  over  ports  other  than  Port  25,  from 
which  it  is  usually  sent. 

Content  objects  would  be  written  and 
temporarily  stored  to  an  onboard  file  sys¬ 


tem.  Matching  metadata  would  be  stored  in 
a  relational  SQL  database  for  subsequent 
data-mining  operations.  Alerts  would  be 
produced  in  real  time  as  violations  were 
identified. 

In  addition,  conceptual  analytics,  which 
uses  pattern-matching  techniques  to  detect 
trends  and  anomalies  in  data  sets,  enables 
users  to  gain  greater  insight  into  streamed 
and  historical  data  flows. 

For  example,  say  a  defense  contractor 
conducts  an  audit  of  electronic  informa¬ 
tion  transmitted  to  other  countries  to  en¬ 
sure  compliance  with  international  regu¬ 
lations.  Investigators  discover  that  FTP 
transmissions  to  China  have  been  bypass¬ 
ing  their  perimeter  security  controls.  A 
risk-discovery  engine  would  detect  and 
record  transmissions  to  China,  then  re¬ 
veal  that  the  information  was  classified 
and  the  source  was  a  rogue  FTP  server.  IT 
personnel  could  then  dismantle  the  FTP 
server  and  provide  electronic  evidence 
of  remediation. 

Appliance-based  content-monitoring 
solutions  with  risk-discovery  engines 
detect,  scan  and  analyze  continuous 
flows  of  information  for  threats,  and 
mine  datastreams  for  patterns  or  anom¬ 
alies.  Correlation  queries  over  historical 
datastreams  captured  and  stored  by  risk- 
discovery  engines  provide  additional 
tools  to  corroborate  perimeter  security 
breaches  and  provide  additional  context 
to  real-time  incidents. 

Cheek  is  vice  president  of  product  man¬ 
agement  for  Reconnex.  He  can  be  reached  at 
kcheek  @reconnex.  net. 


Ask  Dr.  Internet 


By  Steve  Blass 


,  '  :  : 


We’re  looking  for  an  open  source  or  low-cost 
Web-based  project  management  tool.  The  most 
important  feature  we  need  is  a  decent  calen¬ 
daring  system  that  will  work  with  users  from 
distributed  groups  that  don’t  share  an  e-mail 
platform.  We  would  like  the  kind  of  functionality 
Outlook  provides  for  calendars  and  tasks  in  an 
Exchange  environment,  but  without  requiring 
that  everyone  use  Outlook  and  Exchange. 

There  are  several  free  and  low-cost  project  manage¬ 


ment  and  collaboration  groupware  tools,  ranging  from 
full-featured  project  management  portals  to  simple  task 
trackers,  or  software  tool  kits  that  interchange  informa¬ 
tion  and  data  files  between  open  formats  and  Microsoft 
Project.  It  sounds  like  some  general  content-manage¬ 
ment  systems  will  provide  calendaring  features  to  meet 
your  needs.  The  Open  and  Free  Project  Management 
Tools  site  (www.nww.com,  DocFinder:  2366)  provides  a 
list.  Take  a  look  at  dotProject  (www.dotproject.net),  Tutos 
(www.tutos.org)  and  Trac  (DocFinder:  2367). 

DotProject  is  a  PHP/MySQL  Web  application  that 


delivers  project  management,  task-tracking  and  calen¬ 
daring  tools.  Straightforward  Web-based  installation 
requires  only  a  MySQL  database  and  a  user  with  privi¬ 
leges  to  create  a  database.  Tutos  is  similar  to  dotProject, 
but  a  bit  more  difficult  to  install,  and  has  a  more  mature 
documentation  base.  Trac  is  interesting  because  it  is 
wiki-based,  which  makes  it  more  flexible  for  distributed 
and  diverse  workgroups. 

Blass,  a  network  architect  at  Change@Work  in  Houston, 
can  be  reached  at  dr.internet@changeatwork.com. 
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Tools  for 

How  many  times  have  you  been 
traveling  and,  hours  or  even  days 
after  plugging  your  laptop  into  the 
broadband  connection  in  your  hotel 
room,  you  realize  you  didn’t  change 
your  PC  configuration  from  your 
office  setup  to  something  more 
secure? 

Discovering  that  you’ve  exposed 
your  local  shares  to  the  world, even  if 
they  are  read-only  is  sobering. 

We  have  been  testing  a  Windows 
product  called  MultiNetwork  Man¬ 
ager  8  (www.nww.com,  DocFinder:  2368)  from  Globesoft 
that  aims  to  prevent  such  unintended  exposures  and  in  the 
process  makes  switching  configurations  much  easier. 

MultiNetwork  Manager  is  smart  —  it  auto-detects  the  net¬ 
work  you  are  connected  to  and, if  one’s  been  defined, offers 
to  set  up  the  profile  you  configured  for  that  environment. 
With  one  click  you  also  can  change  your  current  network 
setup  to  any  previously  defined  profile. 

Among  the  Windows  networking  features  you  can  save  to 
a  profile  are  dial-up  networking  settings,  TCP/IP  and  proxy 
configurations  (proxy  servers  and  settings  can  be  automat¬ 
ically  discovered  also), domain  and  workgroup  affiliations, 
mapping  of  shared  drives  and  printers,  as  well  as  environ¬ 
ment  and  registry  settings. 

MultiNetwork  Manager  profiles  can  run  scripts  automati¬ 
cally  when  a  profile  is  loaded;  automatically  enable  and 
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travelers 

disable  file  sharing;  use  global  and  profile-based  security 
rules;  integrate  dialers  such  as  iPass;  edit,  import  and 
export  profiles;  and  capture  current  settings  into  new  pro¬ 
files.  You  also  can  configure  wireless  LAN  settings,  includ¬ 
ing  security  configuration,  and  control  VPNs,  firewalls  and 
anti-virus  features. 

The  user  interface  is  good,  and  the  software  has  a  good 
help  file.  MultiNetwork  Manager  comes  in  two  versions:  the 

Discovering  that  you’ve 
exposed  your  local  shares  to 
the  world,  even  if  they  are  read¬ 
only,  is  sobering. 

Standard  edition  for  home  and  business  users  and  the 
Professional  edition  for  IT  professionals  and  administrators 
(see  DocFinder:  2369  for  a  list  of  the  differences  between 
the  versions). 

We  took  this  utility  on  the  road  and  never  wound  up  with 
an  inappropriate  network  configuration,  whether  we  con¬ 
nected  wired  or  wirelessly  When  we  returned  to  the  office 
it  took  only  a  few  seconds  to  reconfigure  for  our  network 
environment. 

MultiNetwork  Manager  costs  $10  for  the  Standard  version 
and  $20  for  the  Professional  edition.  Globesoft  offers  vol¬ 
ume  discounts. 

Wisco’s  SynchPst  is  another  software  find  that  is  incredi¬ 


bly  useful  when  traveling  (www.synchpst.com).  SynchPst 
synchronizes  Outlook  folders  (all  types)  on  two  or  more 
machines  without  the  need  for  Exchange.  The  products 
name  comes  from  the  file  type  —  PST  —  that  Outlook  uses 
to  store  its  folders  and  data. 

To  synchronize  folders  you  need  to  be  able  to  access 
the  remote  machine’s  PST  file.This  is  done  by  mapping  a 
Windows  share  on  the  remote  machine  to  a  local  drive. 

When  you  launch  SynchPst,  it  in  turn  launches  Outlook  if 
Outlook  is  not  already  running.You  select  which  folders  are 
to  be  synchronized  and  click  the  button  to  select  the  direc¬ 
tion  (to  the  local  machine  only,  to  the  remote  machine  only 
or  bidirectionally)  of  the  synchronization. 

Resolving  conflicts  is  straightforward:  In  bidirectional 
mode  the  item  with  the  latest  time  stamp  wins,  and  in  sin¬ 
gle-direction  synchronization  the  source  item  always  wins. 

The  SynchPst  settings  also  let  you  synchronize  every  so 
many  minutes.This  is  great  if  you  are  planning  to  run  out  of 
the  office  at  the  last  minute  —  it  makes  the  final  synchro¬ 
nization  really  fast. 

If  you  are  using  the  Professional  edition  you  can  save  the 
current  setup  as  a  batch  file,  which  lets  you  automate  syn¬ 
chronization,  for  example,  to  synchronize  just  your  in-box 
or  just  your  notes. 

There  are  two  versions  of  SynchPst:  Basic  edition  and 
Professional  edition,  which  cost  $40  and  $70,  respectively 

If  you  have  any  traveling  tools  you  can 't  live  without,  we’d 
love  to  hear  about  them  at  gearhead@gibbs.com. 


The  scoop:  KR1  Mobile  Router,  from  Kyocera,  about  $300. 

What  it  is:  The  KR1  Mobile  Router  looks  like  an  ordinary  wireless 
LAN  (WLAN)  router,  until  you  notice  that  there’s  no  WAN  Ethernet 
port  on  the  back.  Instead,  you  can  slide  a  wireless  WAN  card  (such  as  Kyocera’s 
KPC650  card,  which  accesses  the  Verizon  Wireless  CDMA  EV-DO  network)  to  pro¬ 
vide  wireless  WAN  capabilities.  In  addition,  a  cell  phone  customer  with  an  EV-DO 
data  plan  can  connect  via  a  USB  cable  to  provide  the  WAN  connection. 

The  KR1  includes  four  Ethernet  LAN  ports,  as  well  as  an  802. 1 1  b/g  antenna 
that  can  provide  LAN  connections  for  additional  computers.  The  router 
includes  standard  firewall  features,  and  wireless  security  is  supported  through 
Wired  Equivalent  Privacy  or  Wi-Fi  Protected  Access  Pre-Shared 
Key  settings. The  unit  weighs  less  than  1  pound,  making  it  easy  to 
pack  up  and  carry  with  you  on  your  travels. 

The  KR1  is  aimed  at  mobile  workgroups,  such  as  a  group  of  sales 
teams  in  the  same  location  that  want  to  share  one  connection. 


Kyocera's  KR1  Mobile  Router  lets  you  create  an  instant  broadband  wireless  network 
through  an  EV-DO-enabled  cell  phone  (pictured)  or  a  PC  card. 


Kyocera  even  suggests  the  KR1  as  an  alternative  to  fixed  broadband  services 
(cable  or  DSL)  in  the  home,  although  if  those  options  aren’t  available  for  home 
users,  one  wonders  whether  they’d  be  in  range  of  the  EV-DO  wireless  network. 

Why  it’s  cool:  There  are  several  options  for  providing  Internet  access  to  multiple 
team  members  on  the  road,  but  they’re  not  always  appealing.  Giving  users  multi¬ 
ple  EV-DO  cards  is  one  answer,  but  the  cost  (about  $60  per  month,  per  user)  can 
get  out  of  hand,  especially  if  they’re  not  traveling  frequently.  In-room  hotel  access 
and  WLAN  hot  spots  also  can  be  costly  and  they  often  rely  on  a  team  being  at  a 
specific  location.The  KR1  is  cool  because  it  requires  only  one  WAN  access  option 
(a  user’s  PC  Card  or  EV-DO-enabled  phone)  to  provide  Internet  access  to  multiple 
computers.  As  long  as  your  team  members  are  within  the  range  of  the  EV-DO  net¬ 
work,  you  can  provide  them  Internet  access  without  worrying  about  whether  the 
hotel’s  Internet  service  is  up  and  running. 

Setting  up  the  router  was  easy  —  I  slid  in  the  Kyocera  Wireless  EV-DO  WAN  card 
and  plugged  in  the  power  adapter,  and  the  system  was  up  and  running  (via  the 
defaults  for  WLAN  access).  Configuring  the  router  involves  connecting  an  Ethernet 
cable  to  the  router  from  a  laptop  or  PC  and  using  a  browser  to  change  WLAN  set¬ 
tings,  add  security  levels  and  change  passwords.  I  experienced  a  minor  glitch  —  the 
first  laptop  I  used  for  configuration  couldn’t  access  the  router,  despite  receiving  the 
proper  IP  address  and  being  on  the  same  subnet.  1  switched  to  a  second  laptop  and 
was  able  to  access  the  router  configuration, so  I  chalked  up  the  glitch  to  the  fact  that 
I  was  using  a  pre-production  model  of  the  KR1). 

Kyocera  also  provides  a  $30  optional  car  charger,  which  can  power  the  KR1  unit 
through  the  cigarette  lighter.  This  lets  team  members  use  the  WAN  connection 
while  traveling  in  a  car  —  perfect  for  those  panic  situations  where  a  team  mem¬ 
ber  needs  network  access  right  before  a  sales  presentation  (check  out  the  Cool 
Tools  video  show  at  www.networkworld.com/itvideo  to  see  how  we  attempted  the 
in-car  network  access  scenario). 

Grade:  ★★★★•*  (out  of  five) 

Shaw  can  be  reached  at  kshaw@nww.com. 


It's  more  robust.  More  available.  More  functional Not  only  is  it 
designed  to  help  increase  productivity  and  lower  your  computing 
costs,  you  can  also  expand  your  capabilities  as  your  I.  T.  needs 
evolve 2  Plus  it’s  easy  to  install,  thanks  to  IBM  ServerGuide ™ 

What’s  more,  you  can  keep  your  technology  current  while  helping  to 
reduce  costs  through  IBM  Global  Financing. 

The  xlOO  Express  comes  with  Inter  reliability  -  and  a  whole  lot 
more.  Why  not  put  it  to  work  for  you? 


IBM  eServer  xSeries0 100  Express 


Small  I.  T.  department  facing  big  demands?  A  PC-based  network  can 
only  take  you  so  far.  Enter  the  IBM  eServer ™  xSeries 8 100  Express. 


THE  SERVER  FOR  COMPANIES  WHOSE  I.T. 

DEPARTMENT  IS  LARRY. 


Affordable,  reliable,  easy  to  manage:  xSeries  servers  with  Intel®  Pentium®  Processors 


From 


$709' 


(Other  configurations  as  low  as  $599) 


Intel*  Pentium*  4  Processor  and  Pentium  D  (dual  core)  Processors 
One-way  tower  __  _ _ 

Up  to  500GB  of  storage  with  2  SATA  hard  disk  drives3 


ServerGuide:  for  easy  systems  setup  and  configuration _ 

ECC  error-correcting  memory  for  critical  server  data  protection 
Limited  warranty:  1  year  on-site4 


Pentium’4 

inside 


IBM  BladeCenter*  HS20  Express 

From  $1,839*  (Other  configurations  as  low  as  $1,669) 
IBM  Financing  Advantage  Only  $52/month6 


IBM  TotalStorage®  DS400  Express 

From  $8,495*  (Other  configurations  as  low  as  $4,995) 
IBM  Financing  Advantage  Only  $238/month« 


Up  to  two  Intel®  Xeon*  Processors  3.80GHz/2MB  IBM  Director  to  help  monitor  usage/performance5 
Up  to  14  blades  per  chassis  Limited  warranty:  1  year  on-site4 

Supports  both  32-  and  64-bit  applications 


3U  rack  mount  entry-level  with  up  to  two  controllers  Starts  at  34GB/  scales  to  12TB3 

2GB  Fibre  Channel  host  connectivity  Limited  warranty:  1  year  on-site4 


“Double  Your  Memory”  at  no  additional  cost.  Now  get  double  your  memory  at  no  extra  charge  when  you  purchase  select  IBM  eServer  xSeries 
and  BladeCenter  Express  systems  by  March  13,  2006 1 


ibm.com/systems/innovate20  1  866-872-3902  mention  104CE12A 


•All  prices  are  IBM's  estimated  retail  selling  prices  as  of  December  13. 2005.  Prices  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller  prices  to  end  users  may  vary.  Products  are  subject  to  availability.  This  document  was  developed 
for  offerings  in  the  United  States.  IBM  may  not  otter  the  products,  features,  or  services  discussed  in  this  document  in  other  countries.  Prices  subject  to  change  without  notice.  Starting  price  may  not  include  a  hard  drive,  operating  system  or  other  features.  Contact 
your  IBM  representative  or  IBM  Business  Partner  tor  the  most  current  pricing  in  your  geography.  1.  Comparison  assumes  applications  are  being  run  in  a  server  environment.  2.  May  require  an  additional  charge.  3.  Demies  raw  storage  capacity.  Usable  capacity 
may  be  less.  4.  Telephone  support  may  be  subject  to  additional  charges.  For  on-site  labor.  IBM  will  attempt  to  diagnose  and  resolve  the  problem  remotely  before  sending  a  technician.  On-site  warranty  is  available  only  for  selected  components.  5.  IBM  Director  must 
Pe  installed.  Products  included  in  IBM  Express  Servers  and  Storage  may  also  be  purchased  separately.  6.  IBM  Global  Financing  offerings  are  provided  through  IBM  Credit  LLC  in  the  United  States  and  other  IBM  subsidiaries  and  divisions  worldwide  to  qualified 
commercial  and  government  customers.  Monthly  payments  provided  are  tor  planning  purposes  only  and  may  vary  based  on  your  credit  and  other  (actors.  Lease  offer  provided  is  based  on  a  FMV  tease  ot  3U  monthly  payments.  Other  restrictions  may  apply.  Rates  and 
offerings  are  subject  to  change,  extension  or  withdrawal  without  notice.  7.  Offer  subject  to  the  complete  terms  ot  the  IBM  Double  Your  Memory  promotion  available  through  ibm.com.  IBM,  the  IBM  logo.  eServer.  xSeries,  BladeCenter,  ServerGuide  and  TotalStorage 
are  trademarks  or  registered  trademarks  ot  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Intel  Intel  Inside,  the  Intel  Inside  logo.  Intel  Xeon  and  Intel  Pentium  are  trademarks  or  registered  trademarks  of  Intel  Corporation 
or  its  subsidiaries  in  the  United  States  and  ottier  countries.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©  2005  IBM  Corporation.  All  rights  reserved. 
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Advisory  board 
shares  ideas 

Get  five  technology  executives  in  a  room  to  discuss  tech¬ 
nology  trends  and  you’ll  get  a  healthy  dose  of  reality, 
sans  vendor  hyperbole. 

In  the  first  2006  meeting  of  the  Network  World  Advisory 
Board  (members  hail  from  large  companies  in  the  Boston 
area),  we  discussed  everything  from  IT  management  frame¬ 
works  to  security  The  members  prefer  to  remain  nameless, 
but  their  opinions  are  worth  sharing. 

One  of  the  things  all  of  the  members  share  an  interest  in  is 
the  IT  Infrastructure  Library  (ITIL),a  framework  for  IT  service 
management.  All  five  are  working  with  ITIL,and  most  seem 
to  agree  with  the  approach  that  Gartner  advocates:  Use  just 
enough.“We’re  implementing  the  parts  we  think  we  need,” 
one  board  member  said. 

Why  1TIL?  To  do  anything  today  the  first  step  is  always  “find 
the  gu>(  said  one  board  member.  Find  the  guy  who  knows 
how  this  was  crafted  and  why  and  what  the  dependencies 
are.  She  is  looking  to  use  IT1L  to  introduce  more  formality  to 
the  IT  process  and  define  business  services.“We  want  to  shift 
so  we’re  business-focused  and  less  technology-focused.” 

“IT1L  helps  eliminate  finger-pointing,” said  another  board 
member.  What’s  more,  she  said.it  can  facilitate  outsourcing 
because  many  outsourcers  use  ITIL  frameworks. 

Most  of  the  board  members  are  outsourcing  something. 
One  member  uses  two  companies  in  India  for  application 
support,  primarily  PeopleSoft,  SAP  and  Siebel.He  has  a  full¬ 
time  resource  manager  on  staff  to  support  the  relationships. 

Another  member  outsources  infrastructure  support.  All 
mainframes  were  turned  over,  as  well  as  many  servers,  but 
the  company  kept  desktop  support  and  is  looking  at  bring¬ 
ing  network  monitoring  back  in-house  because  of  a  dispute 
about  who  is  responsible  for  what.The  lesson:Triple-check 
contract  wording. 

When  asked  about  service-oriented  architectures  (SOA), 
the  top  buzzword  of  the  day  one  of  the  members  said  he 
keeps  asking  his  team, “What  problem  are  we  trying  to 
solve?”  If  the  answer  is  application  integration,  the  next  ques¬ 
tion  is,  how  can  the  legacy  stuff  play? 

The  only  member  who  has  an  SOA  service  running  said  he 
expects  SOA  will  arrive  as  the  major  application  vendors 
build  it  in.“We’ll  migrate  as  they  migrate.” 

On  the  security  front,  the  board  members  agreed  that  secu¬ 
rity  isn’t  hard;  meeting  compliance  regulations  is.  Even  inter¬ 
preting  the  rules  is  complicated/it  is  easy  to  over-interpret, 
and  then  costs  go  through  the  roof,”  said  one  member. 

Companies  that  deal  with  consumer  information,  for  exam¬ 
ple,  have  to  comply  with  internal  firewall  requirements. You 
can’t,  for  example,  use  real  data  in  test  environments.“lt  is  at 
least  an  order  of  magnitude  more  complex  than  issues  sur¬ 
rounding  perimeter  firewalls,”  one  member  said. 

— John  Dix 
Editor  in  chief 
jdix@nww.com 


RIP,  token  ring 

In  his  column,  “Ethernet’s  secret  source,”  (www. 
nww.com;  DocFinder:  2355)  Kevin  Tolly  contends 
that  todays  successfully  proliferating  and  evolving 
Ethernet  technology  is,  underneath,  the  IBM  token 
ring,  which  may  be  “gone,  but  it  was  never  a  flop.” 

Tolly  goes  back  to  the  old  saw  determinism,  accus¬ 
ing  Ethernet  of  not  having  it.  While  stating  correctly 
that  there  has  not  been  a  reported  Ethernet  collision 
in  years,  he  fails  to  notice  —  as  so  many  token-ring 
customers  did  —  how  much  non-deterministic  hell 
breaks  loose  when  tokens  get  lost.  He  says  Ethernet 
still  does  not  have  large  frames,  completely  over¬ 
looking  that  token  ring’s  failure  might  have  had 
more  to  do  with  it  being  too  complex,  too  slow,  twice 
as  expensive  and  because  of  the  old  IBM  monop¬ 
oly’s  bad  attitude,  non-standard. 

1  know  from  experience  how  painful  it  is  for 
columnists  to  admit  they  were  wrong.  But  Tolly 
should  just  admit  that  I  was  right  about  Ethernet,  and 
he  was  wrong  about  token  ring.  But  the  trick  is  to 
admit  you  are  wrong  while  people  still  care,  which 
they  don’t  anymore  about  token  ring. 

Bob  Metcalfe 
Ethernet  inventor 
Boston 

In  his  column, “Ethernet’s  secret  source,”  Kevin  Tolly 
calls  Arcnet  a  “LAN  technology  flop.”  I  agree  that 
Arcnet  did  not  have  a  long  life,  but  one  should  con¬ 
sider  what  it  did  for  technology 

Arcnet  was  designed  to  run  on  RG-62.This  coaxial 
cable  was  installed  to  support  IBM  3278  and  3279 
terminals  that  connected  to  mainframes.  Arcnet  let 
PCs  be  used  on  existing  cable  plants,  which  didn’t 
happen  again  until  Ethernet  attempted  to  use 
Category  3  cable,  which  was  designed  for  voice 
communications. 


Although  the  throughput  and  the  architecture  of 
Arcnet  eventually  broke  down.it  had  its  place  in  the 
history  of  technology 

Dewi  Sant 
Senior  technology  consultant 
TekSystems 
Southfield,  Mich. 

Bugged  by  briefs 

In  the  news  brief,  “Explorer  bugs  abound”  (Doc- 
Finder:  2356),  we  learn  that  a  single  bug  that  can 
crash  Internet  Explorer  has  been  found  in  a  beta  re¬ 
lease.  In  the  next  brief,  “Firefox  fixes  a  few  bugs,”  we 
read  of  a  “highly  critical”  release  of  eight  Firefox  fixes 
(including  some  that  would  allow  the  takeover  of  un¬ 
patched  PCs)  and  an  unpatched  bug  inThunderbird. 

The  tone  of  the  Firefox  brief  is  right:  Here’s  the  risk, 
here  are  the  steps  users  should  take  to  protect  them¬ 
selves.  If  the  Internet  Explorer  brief  had  been  written 
in  the  same  tone.it  would  have  boiled  down  to:“Tom 
Ferris  has  published  a  vulnerability  in  the  latest  beta 
release  of  Internet  Explorer.The  vulnerability  can  be 
exploited  to  cause  Internet  Explorer  to  crash.  To 
avoid  any  associated  problems,  users  are  advised 
not  to  use  beta  software.” 

It  seems  to  me  poor  journalism  to  cast  a  single  bug 
in  a  beta  as  proof  that  Internet  Explorer  is  rife  with 
risk,  while  saying  the  Firefox  risk  is  mitigated  be¬ 
cause  no  one  knows  of  any  exploits  taking  advan¬ 
tage  of  the  vulnerabilities  yet. 

Dan  Riordan 
President 
On-Tech  Consulting 
Red  Bank,  NJ. 

E-mail  letters  to  jdix@nww.com  or  send  them  to  John  Dix,  editor  in 
chief,  Network  World,  1 18  Turnpike  Road,  Southborough,  MA  01 772. 
Please  include  phone  number  and  address  for  verification. 
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INFRASTRUCTURE  INSIGHTS 
Daniel  Minoli 


CACHE  ADVANCE 
Linda  Musthaler 


The  virtue  of  virtualization 


Virtualization  is  a  well-known  concept  in  net¬ 
working,  from  virtual  channels  in  ATM,  to  vir¬ 
tual  private  networks,  virtual  LANs  and  virtu¬ 
al  IP  addresses.  However,  an  even  more  funda¬ 
mental  type  of  virtualization  is  achievable  with 
today’s  ubiquitous  networks:  machine  cycle  and 
storage  virtualization  through  the  auspices  of  grid 
computing  and  IP  storage. 

Also  known  as  utility  computing  or  on-demand 
computing,  grid  computing  is  a  virtualization 
technology  that  was  talked  about  in  the  1980s  and 
’90s  and  entered  scientific  computing  in  the  last 
10  years.  It  has  received  a  lot  of  press  and  market 
activity  over  the  last  couple  of  years,  and  a  num¬ 
ber  of  proponents  see  major  penetration  in  the 
immediate  future.  Big  players  in  this  market 
include  AT&T,  IBM,  Oracle  and  Sun. 

Grid  computing  cannot  exist  without  networks 
(the  grid),  because  the  user  is  requesting  com¬ 
puting  or  storage  resources  that  are  located  miles 
or  continents  away  A  user  need  not  be  concerned 
about  the  specific  technology  used  to  deliver  the 
computing  or  storage  power;  all  a  user  wants  and 
gets  is  the  requisite  service.  One  can  think  of  grid 
computing  as  middleware  that  shields  a  user  from 
the  raw  technology  The  network  delivers  job 
requests  anywhere  in  the  world  and  returns  the 


results,  based  on  an  established  service-level 
agreement. 

The  advantages  of  grid  computing  are  its  ability 
to  mix  and  match  different  hardware  in  the  net¬ 
work;  its  lower  cost,  from  better,  statistically  aver¬ 
aged  utilization  of  underlying  resources;  and  its 
greater  availability:  If  a  processor  fails,  another 
one  is  automatically  switched  into  service. 

With  virtualization,  a 
company  can  improve 
utilization,  increase  avail¬ 
ability,  reduce  costs  and 
make  use  of . . .  mix-and- 
match  processors. 

Grid  computing  is  intrinsically  network-based: 
Resources  are  distributed  on  an  intranet,  extranet 
or  the  Internet.  Users  also  can  get  locally  based  vir¬ 
tualization  by  using  middleware  such  as  VMWare 
that  lets  a  multitude  of  servers  in  the  corporate 
data  center  be  utilized  more  efficiently  Typically 
corporate  servers  are  utilized  for  less  than  30%  to 
40%  of  their  available  computing  power.  With  vir¬ 


tualization,  a  company  can  improve  utilization, 
increase  availability  reduce  costs  and  make  use  of 
a  plethora  of  mix-and-match  processors. 

Security  is  a  key  consideration  in  grid  comput¬ 
ing.  The  user  wants  to  receive  services  in  a  trust¬ 
worthy  and  confidential  manner.  There  is  the 
desire  for  guaranteed  levels  of  service  and  pre¬ 
dictable,  reduced  costs.There  also  is  the  need  for 
standardization,  so  that  a  user  with  appropriate 
middleware  client  software  can  reach  any  regis¬ 
tered  resource  in  the  network  transparently  Grid 
computing  supports  the  concept  of  the  service- 
oriented  architecture,  in  which  clients  obtain  ser¬ 
vices  from  loosely  coupled,  service-provider 
resources  in  the  network. Web  services  based  on 
the  Simple  Object  Access  Protocol  and 
Universal  Description,  Discovery  and  Integration 
protocol  are  now  key  building  blocks  of  a  grid 
environment. 

To  grid  or  not  to  grid?  Try  it;  you’ll  like  it.  But  first 
make  sure  you  have  an  effective  corporate  net¬ 
work  infrastructure  in  place. 

Minoli  is  an  adjunct  professor  at  the  Stevens 
Institute  of  Technology’s  graduate  school  and 
author  of  A  Networking  Approach  to  Grid 
Computing.  He  can  be  reached  at  minoli@att.net. 


The  Great  Firewall  of  China 


As  China  grows  increasingly  important  in  the 
world  economy  American  companies  are 
feeling  the  political  pressure  to  “act  respon¬ 
sibly”  as  they  do  business  inside  Chinese  borders. 
The  United  States  and  China  have  vastly  different 
views  on  human  rights,  democracy  individual  pri¬ 
vacy  and  political  freedom.  Now  American  high- 
tech  companies  such  as  Yahoo,  Microsoft,  Cisco 
and  Google  are  caught  in  the  middle  of  this  battle 
of  political  wills. 

No  market  is  more  attractive  right  now  than 
China,  with  its  population  of  more  than  1  billion. 
Conservative  estimates  put  the  current  market  of 
individual  computer  users  at  110  million  and 
growing.  No  wonder  tech  companies  are  anxious 
to  take  root  in  China. 

The  hallmark  of  the  Digital  Age  is  that  more  peo¬ 
ple  have  easy  access  to  more  information  than 
ever  before.  Americans  think  that’s  good,  as  we 
believe  information  helps  people  think  and  act 
for  themselves.  The  Chinese  government,  on  the 
other  hand,  prefers  that  its  populace  have  a  more 
controlled  (read:  censored)  access  to  informa¬ 
tion  and  expression. 

Here’s  where  Google  ends  up  between  a  rock 
and  a  hard  place.To  operate  in  China,  Google  had 
to  agree  to  filter  certain  content  the  Chinese  gov¬ 
ernment  finds  objectionable.  The  resulting  ser¬ 
vice,  called  Google.cn,  is  a  sanitized  version  of  the 
search  engine.  Google  is  not  happy  about  the 
restrictions,  but  the  company  says  they  are  neces¬ 
sary  to  conduct  business  in  China.  Call  it  the  Great 
Firewall  of  China. 


The  repercussions  were  swift  and  loud.  Google 
has  been  called  anti-democratic,  evil,  shameful 
and  greedy.  Human  rights  activists  and  members 
of  Congress  blasted  the  companies  forgiving  in  to 
a  repressive  government. 

Yahoo  also  made  headlines  recently  when  it 
acknowledged  revealing  the  name  of  a  Chinese 
citizen  who  used  the  Internet  to  express  his  polit¬ 
ical  views.  Microsoft  found  itself  in  trouble  over 
hosting  and  then  abruptly  disconnecting  a  popu¬ 
lar  blog  by  New  York  Times  research  assistant 
Zhao  Jing.  Further,  Microsoft  launched  an  MSN 

American  high-tech  com¬ 
panies  ...  are  caught  in 
the  middle  of  this  battle  of 
political  wills. 

portal  that  blocks  the  use  of  the  words  “freedom” 
and  “democracy’  Cisco  is  accused  of  supplying 
the  Chinese  government  with  switching  equip¬ 
ment  that  helps  to  monitor  and  filter  Web  traffic. 
Cisco  said  it  did  nothing  specific  to  help  the  gov¬ 
ernment  take  such  actions. 

Executives  from  these  companies  have  been 
requested  to  appear  before  the  U.S.  Congress  to 
discuss  how  their  business  decisions  may  or  may 
not  support  human  rights  violations.  The  compa¬ 
nies  say  they  don’t  like  being  censored  but  must 
observe  the  laws  of  foreign  countries  if  they  want 
to  do  business  in  them. 


As  a  knee-jerk  response  to  the  situation,  Rep. 
Chris  Smith  (R-N.J.)  is  drafting  a  bill  that  would 
prevent  American  Internet  companies  from 
putting  servers  in  countries  that  the  U.S.  State 
Department  deems  repressive  to  human  rights. 
The  bill  also  would  set  export  controls  for  Web¬ 
site  filtering  devices  that  can  limit  free  speech. 

Excuse  me  for  saying  this,  Congressman  Smith, 
but  you’re  being  awfully  shortsighted.  Is  there  any¬ 
one  out  there  who  thinks  we  Americans  are  going 
to  change  the  Chinese  government’s  stance  by 
keeping  computer  servers  out  of  China  or  making 
companies  like  Google  and  Microsoft  drop  their 
business  there? 

If  our  own  government  restricts  companies  from 
offering  services  in  China  because  our  govern¬ 
ment  doesn’t  like  their  government’s  ideologies, 
who  loses?  Google  and  the  other  companies,  for 
sure.  The  American  economy  which  is  now  so 
driven  by  the  tech  industry,  is  also  on  track  to  lose. 
The  Chinese  government  will  just  find  non-U.S. 
companies  to  provide  Internet  services. 

China  is  an  essential  business  market.  It  seems  to 
me  that  the  U.S. government  should  be  looking  for 
ways  to  help  foster  fair  trade  and  good  business 
practices  so  that  our  companies  can  compete  fair¬ 
ly  As  for  the  charges  of  human  rights  violations, 
let’s  let  the  State  Department  work  on  those  issues 
and  leave  the  technology  providers  out  of  it. 

Musthaler  is  vice  president  of  Currid  &  Company, 
a  Houston  technology  assessment  firm.  She  can  be 
reached  at  linda@currid.com. 


Best  of  the  tests 


□  Among  more  than  200  products 
tested.  48  finalists,  including  10 
ultimate  winners,  rise  above. 


By  CHRISTINE  BURNS 


the  Network  World  Lab  Alliance  —  an  assem¬ 
blage  of  the  industry’s  most  experienced  net¬ 
work  product  testers  —  commissioned  an  ad 
campaign,  the  result  might  very  well  mimic  Orson  Welles’  famous 
voiceover  for  the  Paul  Masson  winery.  “We  will  recommend  no  prod¬ 
uct  before  its  time.”  Well,  it’s  time.  With  our  seventh  annual  Best  of  the  Tests  pres¬ 
entation,  we’re  ready  to  recognize  the  best  of  the  more  than  200  products  we 
tested  last  year  across  a  wide  range  of  technologies.  We’ve  selected  48  finalists, 
from  which  we’ve  named  10  winners,  among  nine  categories,  categorizing  prod 
ucts  based  on  the  most  critical  network  function  they  address. 


services.  (Potential  ad  slogan,  compliments  of  the 
Bounty  brand:“The  quicker  picker-upper”  PAGE  54. 


CLIENT  SECURITY:  Anti-spyware  products  and  services, 
endpoint  security  products.  (Potential  ad  slogan,  compli¬ 
ments  ofVisa:“lt’s  everywhere  you  want  it  to  be.”)  PAGE  38. 


WIRELESS:  Access  points,  handheld  devices,  manage¬ 
ment  wares,  routers,  switches.  (Potential  ad  slogan,  compli¬ 
ments  of  United  Airlines:“Fly  the  friendly  skies.”)  PAGE  56. 


This  year's  Best  of  the  Tests  categories,  and  the  product 
types  within  each,  are: 


CONVERGENCE:  IP  phones,  unified  messaging  wares, 
voice/video  collaboration  services,  VoIP  analysis  suites, 
VoIP  services.  (Potential  ad  slogan,  compliments  of 
Yellow  Pages: “Let  your  fingers  do  the  walking.”)  PAGE  40. 


NETWORK  INFRASTRUCTURE:  Application-accelera¬ 
tion  devices,  content  switches,  servers,  switch/routers. 
(Potential  ad  slogan,  compliments  of  Federal  Express: 
‘Absolutely,  positively  overnight.”)  PAGE  48. 


INFORMATION  MANAGEMENT:  Enterprise  data  search 
engines,  storage  gear,  storage  management  software. 
(Potential  ad  slogan,  compliments  of  Wendy’s:  “Where’s 
the  beef?”)  PAGE  44. 


NETWORK  MANAGEMENT:  Frameworks,  IP  address 
management, server  management, Web  site  usability  and 
management.  (Potential  ad  slogan,  compliments  of 
Burger  King:“Have  it  your  way’)  PAGE  50. 


From  the  pool  of  48  finalists,  we  selected  those  that 
were  the  “simply  the  best”  in  each  category  based  on  the 
product’s  overall  usefulness  when  deployed  in  a  large- 
scale  network.Those  having  multiple  tools  for  getting  the 
job  done  right  carried  more  weight  in  our  final  analysis 
than  point  products  honed  for  a  single  task.  (There  are 
10  winners  because  we  named  two  in  the  too-close-to 
call  Convergence  category) 


MESSAGING:  Anti-spam  products,  e-mail  encryption 
wares,  e-mail  platforms.  (Potential  ad  slogan,  compli¬ 
ments  of  Hallmark:  “When  you  care  enough  to  send  the 
very  best.”)  PAGE  46. 


SECURITY  INFRASTRUCTURE:  Firewalls,  intrusion- 
detection  systems,  security  appliances,  SSL  VPNs. 
(Potential  ad  slogan,  compliments  ofTimex:“Takes  a  lick¬ 
ing  and  keeps  on  ticking.”)  PAGE  52. 


SECURITY  MANAGEMENT:  Group  policy  administration 
tools,  identity  management  products,  network  forensics 
tools,  patch  management  tools,  vulnerability  alerting 


Go  on,  read  about  all  of  them.  In  fact,  we  “betcha  can’t 
eat  just  one,”  because  this  package  simply  is  “good  to  the 
last  drop." 

ONLINE  SPECIAL: 

Get  detailed  results  and  in-depth  test  analysis  of  all  Best 
of  the  Tests  winners  and  finalist.www.nww.com, 

DocFinder:  2357 


□The  dream  OS 

An  OS  tester  fantasizes  about  building  the  best,  most  stable 
server  operating  system.  PAGE  63.  online  special:  Jump  into 
a  conversation  with  your  peers  and  OS  tester  Tom  Henderson 
about  what  features  and  functions  would  be  in  your  dream 
operating  system,  www.nww.com,  DocFinder:  2353 


{more  BEST  PRODUCTS  INSIDE 


go  into  more  depth  about  why  they  picked  the  products 
they  did.  www.nww.com,  DocFinder:  2358 


□Fave  raves 

Five  products  readers  say  they  can’t  work  without. 

PAGE  74. 


□What  to  know  before  you  buy 


Consider  these  testers’  tips  before  making  your  next  net¬ 
work  purchase.  PAGE  66.  online  special:  From  anti-spam  to 
wireless  LANs,  use  our  up-to-date  interactive  buyer’s  guides 
to  get  the  latest  vendor  specs  in  15  product  areas. 
www.nww.com,  DocFinder:  2321 


□Going  above  and  beyond 


□Blogs  worth  mining 


The  best  vendor  blogs  contain  hidden  corporate  and 
product  gems.  PAGE  81.  online  special:  Test  how  well 
you  know  your  vendor  bloggers  by  matching  up  blog 
excerpts  to  their  sources,  www.nww.com,  DocFinder:  2354 


Selected  by  Network  World  columnists,  these  five  products  raise  the  bar  with 
novel  ways  to  solve  today’s  enterprise  challenges.  PAGE  70.  online  special: 
Intrigued  by  these  category-breaking  products?  The  columnists 


The  BEST  PRODUCTS  ISSUE  is  one  of  six  bimonthly  sup¬ 
plements  providing  insights,  opinions  and  information  on 
the  biggest  trends  in  networking.  Up  next  is  the  Network 
World  200  Issue,  our  annual  look  at  the  200  biggest  net¬ 
work  vendors  in  North  America,  coming  April  24. 
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R  0  D  U  C  T  S 


ISSUE 


M/BEST/2006/  •  FEBRUARY  27,  2006 


Anti-spyware,  endpoint  security 


□  winning  company >  McAfee  □  winning  product > Secure  Web  Gateway 


■  |  ast  year  we  put  a  magnifying  glass  to  products  aimed  at  protect- 

I  !  *  —  —  _  nat  effort 

seemed  to  strike  a  chord,  as  two  of  our  most-talked-about  tests 
were  those  that  honed  in  on  anti-spyware  products,  as  well  as 
endpoint  security  and  policy  enforcement  wares. 


Because  spyware  and  other  malicious  software  are 
so  potentially  damaging  to  a  company,  we  are  glad  to 
award  the  Best  of  the  Tests  honor  to  McAfee  and  its 
Secure  Web  Gateway  In  our  anti-spyware  test  of  18 
products,  the  McAfee  Secure  Content  Management 
Appliance  (Secure  Web  Gateway)  impressed  Lab 
Alliance  member  Barry  Nance  for  thwarting  the 
most  spyware  attempts,  as  well  as  for  its  intuitive  user 
interface  and  simple  installation  (www.nww.com, 
DocFinder:  2323). The  system  uses  a  malware  detec¬ 
tion  scheme  plus  signatures  to  block  spyware  proac¬ 
tively,  and  it  updates  daily  with  new  protections. 

Additionally,  we  felt  the  appliance  approach  to 
fighting  spyware  gives  Secure  Web  Gateway  the  edge 
over  software-based  systems.  “Stopping  spyware  via 
gateways  at  each  Internet  connection  point  is  clearly 
superior  to  cleaning  it  from  individual  server  and 
desktop  computers,”  Nance  wrote.  He  further  noted 
that  a  “gateway  is  easier  to  administer,  users  can’t  fool 
with  it,  and  desktop  machines  and  servers  don’t  have 
to  shoulder  the  extra  burden  of  detecting  and  remov¬ 
ing  spyware.  As  long  as  a  gateway  filters  every  single 
crumb  of  spyware  and  users  do  not  bring  freeware  or 
shareware  software  into  the  office,  the  gateway 
approach  is  an  ideal  anti-spyware  solution.” 

McAfee  has  not  updated  the 
Secure  Web 


Gateway  since  our  testing,  but  has  announced  other 
client  security-related  products.  In  late  2005,  the 
company  announced  it  will  provide  VirusScan  and 
McAfee  Personal  Firewall  Plus  to  subscribers  of 
MSN  Dial-Up  (McAfee  already  provides  services  to 
MSN  Premium  subscribers).  VirusScan  detects, 
blocks  and  removes  spyware  —  as  well  as  virus, 
worms, Trojans  and  auto-dialers,  the  company  says. 

In  January,  McAfee  President  Gene  Hodges  re¬ 
signed,  leaving  the  company  to  become  CEO  of 
WebSense. 

□  FUTURE  TESTS:  We  expect  another  round  of 
anti-spyware  tests  in  2006.  We’re  especially  looking  to 
test  gateways  that  aim  to  protect  against  spyware, 
viruses  and  potentially  other  damaging  code.  We’ll 
also  test  products  for  network-access-control  archi¬ 
tectures  as  part  of  our  exclusive  coverage  of  the 
Interop  Labs  taking  place  at 
the  Interop  show  in  May 


McAfee’s  Secure 
Web  Gateway 
appliance  handily 
thwarted  spyware. 


PRODUCT  MASTERMIND: 

Mihir  Mohanty,  ,  i 

senior  product  marketing 
manager  ( 

JOB  DUTIES:  Plans  McAfee’s 
Web  security  products  strategy. 

FAVORITE  FEATURES:  "The 
layered  approach  to  attacking  spyware  — 
the  McAfee  Secure  Web  Gateway  stops  spy- 
ware  at  the  corporate  gateway  before  it 
gets  to  the  desktop.  But  if  spyware  does 


happen  to  make  its  way  to  the  desktop  via 
other  network  connections,  McAfee  offers  a 
desktop  spyware  product  to  stop  it  there.” 


£3 


:USERTAKE: 
□  Oliver  Tsai, 


IT  director,  Sunnybrook  and  Women’s 
College  Health  Sciences  Centre,  in  Toronto 

DEPLOYMENT:  Sunnybrook  &  Women’s 
is  in  the  process  of  expanding  its  use  of 
Secure  Web  Gateway,  which  it  has  relied 


on  for  more  than  four  years.  FAVORITE 
FEATURE:  "The  effectiveness  —  we 
have  had  practically  zero  virus  incidents 
since  the  implementation,  and  spam  is 
limited  to  a  mere  handful  each  day.” 
BUSINESS  BENEFITS:  "The  most  sig¬ 
nificant  benefit  of  [Secure  Web  Gate¬ 
way]  has  been  protecting  our  employees’ 
productivity  from  unnecessary  downtime 
and  meaningless  information  from  virus¬ 
es  and  spam.” 


CLIENT  SECURITY  FINALISTS 

□  Another  big  winner  in  our  anti-spyware  test  was 
Omniquad’s  AntiSpy  Enterprise,  with  its  client/serv¬ 
er  approach  to  solving  problems  (DocFinder:  2323). 
"Stopping  spyware  at  the  gateway  might  not  be  enough, 
especially  if  users  bring  freeware  or  shareware  into  the 
office....  Using  both  gateway  and  client/server  products 
can  potentially  increase  your  success  rate  at  avoiding 
spyware,”  tester  Barry  Nance  noted.  In  our  test, 
Omniquad  stopped  a  high  percentage  of  spyware 
instances  and  removed  all  spyware  residue.  It  won 
points  for  deploying  client  agents  easily  and  automatical¬ 
ly  from  a  central  console,  which  also  stored  configuration 
and  policy  data  in  Active  Directory. 

□  Vernier  Networks  and  PatchLink  earned  a  finalist 
spot  for  their  combined  entry  in  our  endpoint  security 
test  (DocFinder:  2324).  Vernier’s  EdgeWall  7000i  and 
the  PatchLink  Update  Server  proved  a  winning 
arrangement  for  sound  performance  in  all  categories 
tested,  said  Lab  Alliance  members  Mandy  Andress  and 
Rodney  Thayer.  The  combo  excelled  in  remediation,  pro¬ 
viding  the  ability  to  block  network  access  and  automati¬ 
cally  fix  out-of-compliance  systems,  and  it  was  the  most 
resilient  of  the  packages  tested. 

□  Senforce  Technologies’  Senforce  Endpoint 
Security  Suite  (DocFinder:  2324)  earns  a  nod  for  its 
strong  host-centric  approach  to  endpoint  security,  as  it 
uses  only  client  software  and  doesn’t  require  an  addi¬ 
tional  in-line  network  device.  The  product  gets  special 

attention  for  its  Client  Location  Assurance  Service, 

which  provides  crypto-based  assurance  that  a  system 

resides  on  a  known,  trusted  network  and  is  not  being 

* 

spoofed.  This  innovation  gives  users  and  administra¬ 
tors  reasonable  assurance  that  systems  are  on  a 
trusted  network. 

□  Trend  Micro  earns  a  finalist  spot  for  two 
entries.  Network  VirusScan  and  OfficeScan  7 
impressed  us  in  the  endpoint  security  tests  with  how 
easily  the  VirusWall  2500  device  installed  —  "one  of 
the  best  overall  experiences  we  had  during  testing,” 
the  testers  noted  (DocFinder:  2324).  In  our  anti-spy¬ 
ware  tests,  OfficeScan  Anti -Spyware  Suite  and 
InterScan  Anti-Spyware  Suite  did  well  (DocFinder: 
2323).  Trend  Micro  earned  kudos  for  OfficeScan’s  ability 
to  provide  considerable  details  about  each  spyware 
instance  encountered  and  presented  the  data  in  a  vari¬ 
ety  of  helpful  reports. 


Where  Can  You  Turn  for 
a  Total  Solution? 

As  a  total  solutions  provider,  NEC 
understands  the  complexities  today’s 
converged  networks  can  present  to  your 
business.  With  our  proven  experience, 
we  know  what  it  takes  to  help  you  avoid 
traveling  in  the  wrong  direction. 

NEC  delivers  the  most  choices  of  IP 
communications  platforms  to  meet  the 
unique  needs  of  your  business.  Add  to 
that  a  strong  portfolio  of  applications  and 
services,  and  before  you  know  it,  your 
business  is  traveling  in  the  direction  of 
improved  customer  experience,  enhanced 
employee  productivity,  increased  revenue 
generation  and  maximum 
return  on  investment. 


Why  go  in  different  directions  when  you  can 
focus  on  a  Total  Solution?  Turn  to  NEC! 


www.necunified.com/ip 
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Empowered  by  Innovation 


BEST  PRODUCTS  ISSUE 


VAVW.NWW.C0M/BEST/2006/  ■  FEBRUARY  27,  2006 


V  /Q  C\  n  P  C\  IP  phones,  unified  messaging  wares,  voice /video  collab- 

V  w  I  H  I  I  v  oration  services,  VoIP  analysis  suites,  VoIP  services  ' 


□  winning  coMPANY>ClearSight  Networks  winning  PRODua>ClearSight  Analyzer 


ur  test  of  VoIP  analysis 
tools  was  one  of  the  most 
widely  read  online  stories 
last  year  ( www.nww . 
com,  DocFinder:  2341).  So  its  fitting 
that  the  top  performer  in  that  test, 
ClearSight  Networks  ’  ClearSight  Analy¬ 
zer,  with  a  score  of  4. 7  out  of  5,  is  in 
one  of  the  two  winning  spots  in  the 
Convergence  category. 


^  ClearSight  Analyzer  -  ClearSight  Fast  Ethernet  Adapter  #10  (Line  speed  at  100MB) 


File  Capture  Monitor  Help 


jf,  Application 


In  this  Clear  Choice  Test,  we  eval¬ 
uated  products  aimed  at  helping 
VoIP  network  managers  monitor 
and  troubleshoot  IP  telephony  en¬ 
vironments  and  ensure  call  conti¬ 
nuity.  ClearSight  Analyzer  warranted 
high  praise  for  its  extreme  ease  of  use 
and  its  capability  to  analyze  a  wide 
range  of  VoIP  protocols.  Ed  Mier,  a  Network 
World  Lab  Alliance  partner  and  founder  of  net¬ 
work  test  consultancy  Miercom,  conducted  the 
testing  of  this  burgeoning  product  class. 

In  our  tests,  ClearSights  software-only  Analyzer 
ran  on  a  Windows  XP  laptop,  where  it  sniffed  pass¬ 
ing  traffic  and  captured  all  the  packets  traveling 
on  the  network.  The  product  then  analyzed  the 
VoIP  traffic  and  associated  the  VoIP-specific  pack¬ 
ets  with  the  proper  conversation. 

Miercom  gave  the  ClearSight  Analyzer  high 
points  for  its  ability  to  serve  up  pertinent,  real-time 
facts.These  include  caller  destination,  vocoder  in 
use  and  other  details  about  current  VoIP  calls, 
bandwidth  consumption,  IP  addresses  of  key  VoIP 
nodes  and  endpoints,  and  latency,  jitter  and  pack¬ 
et  loss  for  VoIP  calls  between  two  distributed  sites. 
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'<  Summary 

Combined  Flows 

oj  DNS  -  Name  resolver  (10/353) 
Q  Exchange  -  Messaging 
i  )  FTP  -  File  transfer 
Q  Generic  (1  0/1  00) 

Q  H.323  -  VoIP 
Q)  HTTP -Web  (4/1 39) 

|Q  ISAKMP  -  Security 
Q  KERBEROS  -  Security 
Q  MEGACO  -  VoIP 
Q  MGCP  -  VoIP 
Q  MS  SQL  -  Database 
Q  Oracle  -  Database 
Q  POP  -  Incoming  mail 

RTP  -  Media  Protocol  (0/1) 


SIP -VOIP  (11/18) 


Q  SKINNY  -  VoIP 

24  ink  _ 

i  i  SMTP  -  Outgoing  mail 


Severity  Descrip 

Q  E  SIP:  1 003  call  201 5  for  7.320  seconds. 
E  SIP:  2004  call  1 004  for  31 05.466  secoro 


Conversation 


Reports 


172.16.1.10 


NVITE  -  In  progress 


WBSBBBP — " 
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ClearSight  Networks’  ClearSight  Analyzer  served  up  loads  of  data  for  VoIP  troubleshooting. 


While  we  tested  ClearSight  Analyzer  4.0,  the 
company  rolled  out  Version  5.0  last  month.  In  that 
new  bundle,  ClearSight  added  real-time  applica¬ 
tion  and  protocol  support  for  Citrix  Terminal 
Services,  Microsoft  Exchange  and  the  Real  Time 
Streaming  Protocol;  HTTP  flow  reassembly;  and 
support  for  Wi-Fi  packets  on  Ethernet  with  Wired 
Equivalent  Privacy  decryption  and  new  video  and 
voice  codecs. 

Analyzer  5.0  includes  a  variety  of  new  setup  wiz¬ 
ards  and  configurable  reporting  functions. With  an 
optional  History  Reporter,  users  can  track  VoIP 
issues  over  time. 


On  the  business  side,  privately  held  ClearSight 
completed  two  big  distribution  deals  with  Tadiran 
Telecom  and  Interactive  Intelligence.  Both  of 
these  VoIP  providers  have  chosen  to  bundle 
ClearSight  Analyzer  with  their  product  and  servic¬ 
es  offerings. 

ClearSight’s  leadership  changed  hands  recently 
with  the  appointments  of  Masaru  Gomi  as  CEO, 
Osamu  Tomita  as  vice  president  of  marketing,  Vic 
Forgetta  as  vice  president  of  North  American  sales 
and  Tim  O’Neill,  one  of  the  original  employees,  as 
vice  president  of  business  and  technology  devel¬ 
opment. 


CLEARSIGHT  ANALYZER 

:PR0DUCT  MASTERMIND: 

□  Samuel  Li, 

vice  president  of  engineering 
and  technology  i'D-c? 

JOB  DUTIES:  Li  manages  a 
development  team  of  20  engineers 
and  oversees  the  quality-  assurance 
lab.  In  the  bigger  picture,  Li  takes  the  require¬ 


ments  expressed  by  customers  as  well  as  new 
technology  demands  and  tailors  the  product  to 
match  them.  FAVORITE  FEATURES:  "The 
real-time  view  of  actual  applications  communi¬ 
cating  between  the  users,  VoIP  nodes  and 
servers  throughout  the  network.  The  ability  to, 
in  one  simple  view,  determine  if  there  is  a  net¬ 
work  issue,  a  server  issue,  an  application 


issue  or  an  issue  with  a  user  misusing  the  net¬ 
work  or  application.” 

p  HD  :USERTAKE: 

I  I  □  Burt  Bennett, 

general  manager,  Valparaiso  Broadband 
Communication  Systems,  in  Valparaiso,  Fla. 

DEPLOYMENT:  Has  been  using  ClearSight 


Analyzer  for  about  six  years.  FAVORITE 
FEATURE:  "My  favorite  is  the  GUI,  and 
favorite  capability  [is] 

the  filter  creation.”  BUSINESS  BENEFITS: 
"[We]  have  benefited  by  being  able  to  easily 
identify  network  traffic  and  problems  in  real 
time,  [which]  ...  leads  to  cost-effective  net¬ 
work  management.” 


MULTIPLE  PHONE  NUMBERS 
ARE  A  HASSLE  EVERYONE 
HAS  TO  LIVE  WITH 


. 


WITH  AVAYA  IP  TELEPHONY,  JUST 
ONE  NUMBER  CAN  REACH  YOU 
ANYTIME,  ANYWHERE.  ^ 
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COMMUNICATIONS 
AT  THE  HEART  OF  BUSINESS 


Discover  What’s  Possible.  Register 

for  the  Virtual  Technology  Summit 
at  avaya.com/vtechsummit 


VIRTUAL 
TECHNOLOGY 
SUMMIT  2006 


FIRST  500  REGISTRANTS  WILL  RECEIVE 
A  SWISS  ARMY™  USB  LOADED  WITH 
VALUABLE  INSIGHTS 
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BEST 


PRODUCTS 


ISSUE 


winning  company >  Interwise 


WWW.NWW.C0M/BEST/2  00  6/  •  FEBRU/ 


vi/iNNiNGPRODUd>i Meeting  and  Enterprise  Connection 


gnoring  the  4.8  out  of  5  points  Interwise  received  for  its  Enterprise 
Connection  Platform  (since  renamed  ECP  Connect)  and  Meeting 
application  would  be  awfully  tough. 

In  last  year’s  global  test  of  voice  and  videoconferencing  services  and  products, 
Lab  Alliance  member  Christine  Perey  lauded  Interwise  for  its  “rich  feature  set,  yet 
easy-to-use  Web  conferencing  service.  It  delivered  a  flawless  performance  every  time  we  ini¬ 
tiated  a  rich-  media  meeting  with  people  who  had  (and  who  hadn’t)  previously  downloaded 
the  software  and  offered  optimal  levels  of  management  and  security  for  enterprise  IT  man¬ 
agers”  (DocFinder:  2342). 

The  ECP  Connect  system  offers  responsive  desktop-,  application-  and  file-sharing  for  people 
on  networks  with  different  bandwidths,  and  had  well-integrated  whiteboard  tools,  co-brows- 
ing  and  simple  polling.  Even  the  video  over  IP  feature  was  flexible  in  an  ECP-based  meeting, 
though  this  feature  did  need  some  work  (hence  the  0.2  deduction  off  a  perfect  score). 

Since  our  testing,  Interwise  has  added  many  features  to  the  ECP  Connect  service. The  ECP 
Connect  for  Web  conferencing  includes  a  fully  integrated  voice-conferencing  capability. The 
company  says  this  can  help  reduce  voice-conferencing  costs  on  average  between  $150  and 
$200  per  person,  per  year.  Users  can  access  a  voice  conference  via  TDM  or  VoIP  (telephones, 
headsets  or  desktop  speakers  and  microphones)  and  then  escalate  to  a  Web  conference  for 
the  fixed  price  and  unlimited  usage  that  Interwise  offers. 

Other  new  features  include  My  Meeting  Room  (which  gives  access  to  a  personal,  secure 
meeting  room  for  ad  hoc  Web  or  voice  conferences);  integrated  on-site  or  hosted  service 
deployment  options  and  integration  with  single  sign-on  and  reverse  proxy  systems. 
Certification  with  Nortel’s  Communication  Server  1000  is  expected  this  quarter. 


CONVERGENCE  FINALISTS 

□  Aastra  Technologies’ VenturelP  all-in-one,  peer-to-peer,  IP-based  phone 
system  earned  its  Best  of  the  Tests  stripes  in  a  stand-alone  test  conducted  by  Test 
Alliance  partner  Miercom.  VenturelP  offers  a  full  spectrum  of  enterprise  telephony 
features,  serves  up  reliable  service  and  good  call  quality  and  has  an  impressive 
autoconfiguration  capability.  Because  the  product  does  not  use  an  expensive  cen¬ 
tral  PBX  or  server,  small-to-midsize  enterprise  deployments  could  realize  a  signifi¬ 
cant  savings  over  alternatives  (DocFinder:  2343). 

□  Avaya’s  Modular  Messaging  System  and  Unified  Communications 
Center  and  Siemens  Communications’  HiPath  Xpressions  made  this  year’s 
convergence  short  list  based  on  the  outcome  of  our  VoIP-based  unified  messaging 
Clear  Choice  Test.  In  this  test,  Miercom  engineers  examined  what  major  VoIP  ven¬ 
dors  offered  up  the  best  PBX-based  software  providing  efficient,  consolidated, 
hands-free  access  to  voice  mail  and  e-mail  via  any  phone  device,  situated  any¬ 
where.  Avaya  topped  the  competition  because  of  its  well-done  Web  interface  to 
unified  e-mail  and  voice  mail,  superior  voice-recognition  interface,  and  outstanding 
text-to-speech  accuracy  and  performance.  Siemens  placed  a  close  second,  as  its 
major  strengths  are  exceptional  administrative  access  to  the  unified  messaging 
environment,  a  very  good  Web  interface  to  unified  e-mail  and  voice  mail,  and  tai¬ 
lored  voice-recognition  options.  (DocFinder:  2344). 

□  The  seven  remaining  finalists  in  this  category  earned  exceptionally  high 
scores  in  the  crowded  Web-conferencing  field.  We  tested  these  products  on  the 
Internet  across  three  continents  (DocFinder:  2342).  Raindance  Commun¬ 
ications’  Raindance  Meeting  Edition  demonstrated  very  high  availability  and 
reliability,  served  up  high-quality  video  and  offered  well-integrated  public  switched 
telephone  network  audio.  WebEx  Communications’  Meeting  Center  was 


□  FUTURE  TESTS:  In  addition  to  our  recently  published  test  of  how  VoIP  traffic 
is  supported  by  SSL  VPNs  (DocFinder:  2335),  our  2006  lineup  includes  a  com- 
' E  T  parative  test  of  enterprise  session  border  controllers  and  another  round  of 

VoIP  analysis  tools  testing.  We’ll  also  do  a  roundup  of  gear  that  can  han¬ 
dle  VoIP  over  wireless 
communications  and 
assess  the  overall  state 
of  VoIP  over  wireless. 


New  features  to 
iMeeting  include  an 
integrated  onsite  or 
hosted  service  deploy¬ 
ment  option. 
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extremely  easy  to  learn  and  use,  proved  to  be  very  well  integrated  with  Microsoft 
Office  applications  as  well  as  Microsoft  services  (including  MSN),  was  highly 
responsive  and  offers  excellent  multilingual  support.  WebDemo  Hosted,  from 
Inter-Tel  division  Linktivity,  received  a  top  score  because  of  its  complete 
Office  and  browser  integration  for  scheduled  and  ad  hoc  meetings,  the  ability  to 
change  screen-color  depth  during  presentation  and  its  multilingual  support. 
Convoq’s  ASAP  Pro  2.0  was  a  strong  finisher,  because  getting  into  a  meeting 
using  this  service  is  very  easy  and  flexible.  It  has  excellent  support  for  media¬ 
sharing  and  collaboration,  and  has  ubiquitous  use  of  Flash.  Elluminate’s 
Elluminate  Live!  Team  Edition  picks  up  kudos  for  its  equal  application-sharing 
support  across  Windows,  Macintosh  and  Linux  and  well-supported  recording  and 
playback  capabilities.  Centra  7  eMeeting  from  Centra  Software  (acquired 
Feb.  1  by  Saba)  provides  good  scheduling/invite  integration  with  Outlook,  e-mail 
and  instant  messaging;  has  highly  developed  recording  feature  and  offers  a  com¬ 
plete  meeting  management  tool  palette,  including  an  excellent  crowd  management 


IMEETING  AND  ENTERPRISE  CONNECTION  PLATFORM 


system.  Santa  Cruz  Networks’ VidiTel  gets  a  wave  for  providing  high-quality 
video  and  full-duplex  audio,  and  offering  a  highly  integrated  presence  and  IM- 


rPRODUCT  MASTERMIND: 

□  Neil  Lieberman,  '  1  ' 

vice  president  of  product 
management  and  marketing 

JOB  DUTIES:  Lieberman  assesses 
market  dynamics,  customer  require¬ 
ments  and  technology  developments  to  deter¬ 
mine  product  requirements.  FAVORITE  FEA¬ 
TURES:  "It’s  a  tie  between  two  features.  First 
is  the  ability  to  seamlessly  move  between  tradi¬ 
tional  TDM  audio  and  VoIP  within  a  meeting  — 
and  be  automatically  identified  and  bridged  in  by 


the  technology. ...  My  other  favorite  feature  is 
that  we  integrate  our  premises  software  and 
hosted  service  into  a  single,  integrated  hybrid 
deployment.  This  helps  enterprises  move  for¬ 
ward  with  onsite  conferencing  technology,  but 
at  a  worry-free  pace.  Once  using  on-site,  the 
savings  are  tremendous  —  think  of  a  company 
spending  $2  million  a  year  on  Web  and  voice 
conferencing.  We  are  able  to  cut  that  in  half.” 


:USERTAKE: 

□  Shawn  Derifield,  director 


enabled  directory  that  lets  users  readily  see  each  other. 


of  systems 
training 
and  global 

support  center,  International  Game  Technology, 
in  Reno,  Nev. 

DEPLOYMENT:  Began  using  the  Web  confer¬ 
encing  service  four  years  ago  for  Web  meetings. 
Now  uses  iMeeting  for  online  employee  and 
customer  training,  live  instructor-led  training, 
and  brainstorming  and  strategic  planning  meet¬ 
ings.  FAVORITE  FEATURE:  "VoIP  and  the 
strength  of  the  voice  quality,  and  the  integra¬ 


tion  of  all  the  connectivity  pieces.  It  doesn’t 
matter  if  we  have  people  on  the  road,  on  cell 
phones  or  at  their  desktop  using  their  comput¬ 
ers.  With  the  new  technology,  users  can  pretty 
seamlessly  choose  between  those  media.” 
BUSINESS  BENEFITS:  "The  main  benefit 
has  been  responsiveness  to  the  customer.  We 
can  provide  them  a  learning  solution  no  matter 
where  they’re  at  or  what  time  of  day  it  is.” 


DEFINE  YOUR  OPEN  ENTERPRISE" 

In  my  open  enterprise,  confidence  flows 
freely  because  information  flows  securely. 

Every  identity,  transaction  and  document  represents  a  possible  security 
risk  for  your  company.  A  risk  that  could  cost  you  millions  in  litigation 
and  overhead  associated  with  data  and  intellectual  capital  theft — 
plus  your  reputation  and  brand  equity.  Security  and  Identity  solutions 
from  Novell®,  the  most  proven  in  the  industry,  centralize  identity 
management,  reducing  the  complexity  and  costs  of  managing  users 
and  access,  all  while  ensuring  regulatory  compliance  for  you. 

There’s  no  better  way  to  secure  your  enterprise.  Or  to  ensure 
that  your  data  is  working  for  you  and  not  against  you. 


A i 


Security  and  Identity  solutions  from  Novell. 

This  is  the  way  to  secure  your  open  enterprise. 

Novell 

This  is  your  open  enterprise™ 

www.  novel  I .  com/secure 

Copyright  ©  2006  Novell,  Inc.  All  Rights  Reserved.  Novell  and  the  Novell  logo  are  registered  trademarks; 

This  is  your  open  enterprise  and  Detine  your  open  enterprise  are  trademarks  ol  Novell,  Inc.  in  the 
United  States  and  other  countries.  All  third-party  trademarks  are  the  property  ot  their  respective  owners. 
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BEST  PRODUCTS  ISSUE 


Enterprise  data  search  engines,  storage 
gear,  storage  management  software  ) 


'  winning  company > Google  □  winning  PRODucT>Google  Search  Appliance 


what  used  to  be  a  category  strictly  applied 
to  storage  gear,  we  now  include  new  and 
interesting  products  that  can  help  enterprises 
navigate  data  sitting  on  storage  gear.  The 
Google  Search  Appliance  —  our  winner  in  this  newly  designat¬ 


ed  Information  Management  category  — 

Our  test  showed  that  Google  has  successfully 
packaged  its  popular  Internet  search  technology 
into  an  easy-to-use  search  engine  for  corporate 
intranets  and  public-facing  business  sites 
(www.nww.com,  DocFinder:  2336).  However,  the 
new  enterprise-focused  Google  Search  Appliance 
could  use  a  bit  of  polish  to  make  it  more  appealing 
to  veteran  network  professionals. 

Network  World  Lab  Alliance  partnerThomas  Powell 
gave  the  search  tool  4.35  out  of  5  points,  saying  the 
appliance  is  easy  to  configure  and  maintain.  He  also 
liked  it  because  of  the  underlying,  highly  accurate, 
crawler-driven  engine.  The  crawler  is  capable  of  in¬ 
dexing  220  types  of  content.“We  saw  no  limitation  in 
the  crawler  and  found  that  the  device  tended  to  dis- 


is  a  case  in  point. 

cover  files  that  we  were  not 

aware  of  in  some  test  data  sets,”  Powell  notes. 

Since  we  tested  the  appliance  last  summer,  Google 
released  updated  versions  of  the  box  focused  on 
performance  and  scalability  All  appliance  models 
received  enhancements  in  crawl  speed,  processing 
and  query  volumes,  while  the  clustered  models 
(specifically  the  GB-5005  and  GB-8008)  also  were 
upgraded  to  support  greater  document  capacities. 

Google  says  it  will  roll  out  another  software  up¬ 
grade  later  this  year  aimed  at  improving  the  user 
experience.  The  upgrade  should  improve  search 
quality  and  speed,  increase  the  types  of  search¬ 
able  content,  and  boost  the  types  of  authentica¬ 
tion  and  authorization  systems  with  which  the 


INFORMATION  MANAGEMENT  FINALISTS 

□  Intrant  Technologies’  ReadyNAS  600  and  Anthology  Solutions’ Yellow  Machine  earned  finalist  designations 
because  of  their  performance  as  network-attached  storage  (NAS)  devices  aimed  at  small  or  midsize  businesses  (DocFinder:  2337). 
Lab  Alliance  member  James  Gaskin  gave  Intrant’s  ReadyNAS  600  high  points  for  its  clean  administration,  flexible  deployment 
options  and  far-reaching  client  support.  He  also  lauded  Anthology  Solutions’  Yellow  Machine  for  providing  a  complete  network  in  a 
box.  This  taxicab-yellow  NAS  box  adds  router  and  firewall  features  to  its  resume,  as  well  as  provides  server-based  backup  for  all 
clients  connected  to  it  —  and  it  does  everything  fairly  well,  Gaskin  said. 

□  Buffalo  Technology’s  TeraStation  earned  its  finalist  stripes  by  offering  so  much  storage  for  so  little  price,  Gaskin  noted 
(DocFinder:  2338).  The  storage  afforded  by  this  sleek  silver-cased  product  —  even  when  configured  for  RAID-5  and  the  highest 
performance  and  fault-tolerance  the  company  offers  —  only  costs  $1.25  per  gigabyte.  This  level  of  terabyte  storage  space,  reliabil¬ 
ity  and  performance  has  never  been  so  affordable. 


appliance  can  interoper¬ 
ate,  the  company  says. 

Google’s  Enterprise  division  ex¬ 
perienced  strong  market  growth  last 
year,  amassing  about  50  new  customer  installa¬ 
tions.  Among  corporate  users  are  the  city  of 
Toronto,  in  Canada;  DuPont,  ING,  Ingersoll  Rand 
and  the  Ministry  of  Defense  in  the  United 
Kingdom. 

In  terms  of  corporate  maneuverings.the  company 
in  September  launched  the  Google  Enterprise 
Professional  program,  a  channel  of  system  integra¬ 
tors,  consultants  and  independent  software  vendors 
offering  products  and  services  that  work  on  top  of 
the  Google  Search  Appliances.  In  October,  Google 
hired  Vint  Cerf  —  widely  recognized  as“the  father  of 
the  Internet”  —  as  chief  Internet  evangelist. 

□  FUTURE  TESTS:  We  will  continue  our  expan¬ 
sion  of  this  category  with  comparative  tests  of  enter¬ 
prise  search  engines  and  e-mail  archiving  products. 
In  addition,  on  tap  are  tests  of  discovery  inventory 
and  storage  device-management  products,  informa¬ 
tion  life-cycle  management  waresvand  local  and 
remote  software  replication  software. 


:PR0DUCT  MASTERMIND: 

Matthew  Glotzbach,  .  (  . 

senior  product  manager,  \  ' 

Google  Enterprise  f 


JOB  DUTIES:  Oversees  the  \  ~ 
Google  Enterprise  product  manage-  s 
ment  and  marketing  team;  handles 
the  overall  product  vision  and  ongoing  develop¬ 
ment  road  map  of  the  Google  Search  Appliance. 
FAVORITE  FEATURE:  "The  search  user 
experience.  As  a  user  of  the  Google  Search 
Appliance,  I  can  go  to  a  simple,  clean  interface, 
type  in  a  few  keywords,  and  in  less  than  a  sec¬ 


MTU 


ond  get  back  relevant,  secure  search  results.  I 
get  an  experience  just  like  Google  provides  me 
on  the  Internet,  including  spelling  correction, 
cached  pages  and  dynamic  snippets.” 


L 


V  :USERTAKE: 

□  Greg  Rhodes, 

senior  Web  developer,  PLATO  Learning, 
in  Bloomington,  Minn. 


DEPLOYMENT:  Launched  Google  search 
on  www.plato.com  in  September  2005;  since 
then,  integrated  the  search  capability  into 
the  customer  support  Web  site  and  the 


intranet.  FAVORITE  FEATURE: 

"The  built-in  relevancy  ranking  and  the  serv¬ 
er’s  flexibility.  The  relevancy  ranking  is 
unparalleled  in  the  industry.  As  for  flexibility, 
we  are  able  to  use  a  single  box  to  deliver 
search  results  to  three  different  sites,  with 
three  different  sets  of  documents.  I  was  able 
to  customize  the  search  results  to  be  truly 
seamless  with  each  of  the  sites.  In  addition, 
we  were  able  to  deliver  public  results  on  two 
of  the  sites,  while  maintaining  the  security  of 
the  private  documents  on  our  intranet.” 
BUSINESS  BENEFITS:  "The  largest  ben¬ 


efit  is  the  impact  it’s  made  on  our  intranet. 
With  nearly  20,000  documents,  findability  of 
information  was  a  huge  problem  for  us,  and 
our  previous  search  engine  just  wasn’t  help¬ 
ing.  But  now,  employees  can  usually  find 
what  they  are  looking  for  through  the  search 
engine.  The  second  most  significant  benefit 
that  we’ve  experienced  is  with  our  customer 
support  Web  site.  Finally,  we  are  able  to  inte¬ 
grate  Web  page  content,  PDF  documents  and 
PeopleSoft-driven  Knowledge  Base  data  into 
a  single  search  engine  with  advanced  filter¬ 
ing  capabilities.” 


The  Xerox  Phaser  8500*  network  color  printer 
delivers  heavyweight  specs  at  a  featherweight  price. 
Which  means  it  can  take  on  anybody. 

Xerox  Color.  It  makes  business  sense. 


To  make  the  tough  Xerox  Phaser  8500  even  tougher  to 
resist,  we  reduced  it  to  $699  after  a  $200  rebate.  It  still 
delivers  up  to  24  color  pages  a  minute  and  an  industry¬ 
leading  first-page-out  time  that  delivers  stunning  600  dpi 
color  in  just  6  seconds.  It  has  Driver  Color  Controls  to 
match  output  color  to  the  color  on  your  computer  screen. 


And  talk  about  endurance!  With  one  of  the  largest  paper 
capacities  in  its  class,  the  Phaser  8500  just  keeps  going.  It’s 
easy  to  install  and  maintain.  Solid  Ink  technology  makes  it 
environmentally  green.  Naturally,  it’s  from  a  winning  line 
of  color  printers  and  multifunction  systems.  To  learn  more, 
contact  us.  We’re  sure  our  little  champ  will  knock  you  out. 


*For  rebate  details  visit  the  website  below. 

call:  888-247-5107  |  Technology  |  Document  Management  j  Consulting  Services  | 

click:  xerox.com/office/1989 
contact:  Your  local  reseller 


Limited  time  offer.  Offer  is  valid  for  end  users  who  purchase  any  new  Xerox  Phaser  8500N  or  Phaser  8500DN  between  1/1/06  and  3/31/06.  Xerox  must  receive  completed  refund  request  and  copy  of  the  dated  invoice  by  4/30/06.  Cannot  be  combined  with  any  other  Xerox 
incentive.  Xerox  will  mail  the  eligible  rebate  check  directly  to  end  user.  Allow  6  to  8  weeks  for  delivery.  Open  to  U.S.  customers  with  a  valid  U.S.  mailing  address.  Xerox  resellers,  agents,  dealers,  distributors  and  retailers  are  not  eligible.  Not  responsible  for  late,  lost  or 
postage-due  mail.  Void  where  prohibited.  Applicable  tax,  if  any,  is  the  sole  responsibility  of  end  user. 

©2006  XEROX  CORPORATION.  All  rights  reserved.  XEROX*,  Phaser*  and  Xerox  Color.  It  makes  business  sense  are  trademarks  of  XEROX  CORPORATION  in  the  United  States  and/or  other  countries. 
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ina  (  Anti-spam  software,  e-mail  encryption,  e-mail  platforms 


□  winning coMPANY>CipherTrust  □  winning  PRODucT>lronMail  appliance 


you  don ’t  think  messaging  is  imperative  to  your  business,  take 
away  the  mail  server  for  a  few  days  and  see  how  many  calls  you 
get  from  employees.  Better  yet,  think  of  how  you  accomplished 
your  job  before  e-mail.  (We  remember  something  about  tele¬ 


phones,  fax  machines,  paper  memos. . . .) 

Back  to  reality  In  2005,  we  looked  closely  at  the  secu¬ 
rity  of  messages  crossing  the  network.  We  tested  some 
e-mail  encryption  products  that  bolt  onto  e-mail  sys¬ 
tems  and  others  that  provide  new  features  for  the 
encryption-sawy  (www.nww.com,  DocFinder:  2339). 

CipherTrust’s  IronMail  appliance  won  the  e-mail 
encryption  product  test  as  well  as  the  Best  of  the  Tests 
Messaging  category  The  appliance  provided  strong 
encryption  delivery  performance  and  incredibly  easy 
installation, garnering  a  score  of  4.1  out  of  5.“We  were 
up  and  running  with  a  base  configuration  in  min¬ 
utes,”  said  Network  World  Lab  Alliance  member  Travis 
Berkley  Installation  is  easy  because 
CipherTrust  delivers  appliances,  pre¬ 
configured  to  your  specs,  that  are 
simply  slipped  into  a  rack  and 
turned  on,  he  said. 


The  IronMail  appliance  delivered  strong  encryption. 


Also  impressive,  Berkley  noted,  is  that  a  customer 
can  take  its  corporate  brand  (logo,  colors,  Web 
design)  and  redraw  the  CipherTrust  interface  to 
match  that  corporate  look  and  feel. 

While  the  test  focused  on  CipherTrust’s  gateway-to- 
user  e-mail  encryption  using  its  staging-server  mod¬ 
ule,  the  company  also  offers  gateway-to-gateway 
encryption.  This  latter  method  can  be  best  for  sup¬ 
porting  standards  and  securing  ongoing  business 
relationships, such  as  with  partners  and  customers, as 
well  as  in  supporting  multiple  technologies,  such  as 
SSL/Transport  Layer  Security  Secure  Multi-purpose 
Internet  Mail  Extensions  and  OpenPGP 
Since  our  test,  CipherTrust  launched  Trusted- 
Source  Portal  (www.trustedsource.org),  a  free  re¬ 
source  that  offers  precise  information  about  an  e- 
mail  sender’s  reputation  by  domain  and  IP  address. 

It  also  launched  IronMail  Version  6.0  (we  tested 
Version  5.0.1),  which  provides  deeper  integra¬ 
tion  with  TrustedSource,  has  enhancements 
to  outbound  messaging-security  features 
(including  dictionary  correlation  and 
customized  reports),  offers  customiz¬ 
able  dashboards  and  has  tighter  ties 
with  Active  Directory 
In  October,  the  company 
launched  IronIM,  a  security 
gateway  appliance  for  instant 
messaging.  IronIM  integrates 
policies  to  help  secure,  log, 
monitor  and  encrypt  corpo- 


:PR0DUCT  MASTERMIND: 

□  Paul  Judge, CTO  v  , 

\  ^ 

JOB  DUTIES:  Manages  research, 
advanced  product  development  and 
product  management;  lead  inventor  of 
CipherTrust’s  patent  pending  security 
technologies.  FAVORITE  FEATURE:  Ease  of 
use.  "While  the  mathematics  behind  the  cryptogra¬ 
phy  and  key  management  is  interesting,  what 
makes  this  product  exciting  is  that  we  figured  out 


a  way  to  hide  all  of  that  from  administrators  and 
users.  In  the  past,  I’ve  seen  situations  where 
encrypting  a  message  was  too  burdensome,  so 
people  would  just  send  sensitive  messages,  even 
credit  card  numbers  or  medical  records,  in  plain 
text.  Now  sending  a  message  securely  is  easy 
enough  that  users  and  administrators  are  actually 
encrypting  e-mail.. .  .The  other  exciting  thing  is 
that  CipherTrust  Encryption  can  figure  out  that  a 
message  contains  sensitive  information  and 
encrypt  it  even  if  the  user  forgets.” 


rate  IM  communications. 

The  company  also  shipped  its  IronNet  gateway  a 
real-time,  multiprotocol  system  that  enforces  com¬ 
mon  corporate  policies  across  e-mail,  instant  mes¬ 
saging,  Web  mail,  peer-to-peer  technologies  and  other 
FTP-  and  HTTP-based  activity  IronNet  is  targeted  to 
reduce  the  liability  “related  to  the  exchange  of  offen¬ 
sive  content”  and  help  with  compliance  regulations. 

CipherTrust  also  opened  West  Coast  headquarters 
in  Sunnyvale,  Calif.,  to  provide  customers  with  in¬ 
creased  access  to  research  and  engineering,  as  well 
as  sales  and  customer  support  resources. 

□  FUTURE  TESTS:  Tests  of  anti-spam  tools  and 
anti-virus  gateways  are  strong  possibilities  for  2006. 
Plus,  we  want  to  see  if  enterprise  email  archiving  sys¬ 
tems  are  ready  for  prime  time.  Continued  use  of  IM 
by  employees  also  intrigues  us  —  we’ll  likely  test  IM 
security  vendors  to  see  what’s  being  done  to  monitor, 
manage  and  even  prevent  bad  information  from  trav¬ 
eling  the  IM  route. 


MESSAGING  FINALISTS 

□  PGP’s  Universal  Series  500  turned  in  high  marks 
in  our  encryption  test  (DocFinder:  2339).  The  system  sup¬ 
ports  extremely  strong  encryption  (up  to  4,096  bits  for 
Triple-DES)  and  performs  well  in  delivering  encrypted 
e-mails. 

□  For  anti-spam,  Symantec’s  Mail  Security  8100 
Series  appliance  (DocFinder:  2340)  got  our  nod.  The  8160 
model  we  tested  limits  the  amount  of  network  bandwidth 
that  spam  can  consume.  "When  the  bits  start  flying,  it  man¬ 
ages  the  load  on  corporate  mail  servers  quite  well,  provid¬ 
ing  a  good  first  line  of  defense  in  reducing  the  amount  of 
spam  that  enters  the  network,”  said  Lab  Alliance  member 
Joel  Snyder.  The  system’s  ability  to  handle  850  messages 
per  second,  along  with  its  easy  integration  into  an  existing 
network  topology,  earned  this  product  a  finalistspot. 


:USER  TAKE: 

□  Jim  Donaldson, 

corporate  security  and  privacy 
officer,  Baptist  Health  Care, 
in  Pensacola,  Fla. 


DEPLOYMENT:  Began  using  CipherTrust  more 
than  two  years  ago  to  protect  communications 
between  the  health  system  and  insurance  compa¬ 
nies,  state  agencies  and  the  like.  FAVORITE 
FEATURE:  "if  a  secure  link  already  has  been 
established  between  our  site  and  a  recipient,  then 


it  will  automatically  send  the  e-mail  over  that  link 
without  first  sending  it  to  a  secure  delivery  site. 
So  this  is  a  good  feature  because  it  eliminates  a 
step  for  the  receiver.”  BUSINESS  BENE¬ 
FITS:  "This  has  helped  with  regulatory  compli¬ 
ance  —  we  now  have  an  avenue  to  communi¬ 
cate  electronically  and  retain  the  bounds  of 
reasonable  standards  to  protect  the  informa¬ 
tion.  And  it  helps  with  auditing;  we  know  who 
sent  what  and  who  came  to  get  it.” 
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f  Application-acceleration  devices,  content 
switches,  servers,  switch /routers 


□  WINNING  COMPANY  >  Cisco  □  WINNING  PRODUCT >  Catalyst  4948- 10GE 


titm  ome  of  the  first  tests  Network  World  conducted  more  than  a  dozen 
years  ago  were  on  what  would  now  be  called  very  low-end  servers 
and  switches  —  those  with  only  one  slow  CPU  and  10Mbps  net- 
I. . . . . .  work  connections.  Judging  by  the  features  of  this  year's  Best  of  the 


NETWORK 

INFRASTRUCTURE  FINALISTS 

□  IBM’s  IBM  x336  PC-based  server  earned  a  spot 
on  our  top  performer’s  list  in  this  category  because  Lab 
Alliance  member  John  Bass  was  impressed  with  its 
solid  performance,  great  physical  design  and  wide  set 


Test  Network  Infrastructure  winner  —  Cisco's  Catalyst  4948-1 OGE  with  its  48 
copper  Gigabit  Ethernet  and  two  10G  Ethernet  ports  —  you  can't  help  but  real¬ 
ize  that  we've  all  come  a  long  way  ( www.nww.com ,  DocFinder:  2345). 


of  management  features  (DocFinder:  2346).  The  serv¬ 
er’s  single-rack  space  form  should  be  attractive  for 
enterprise  applications  where  two-processor  servers 
are  needed  but  space  is  a  premium,  Bass  said. 


In  this  stress  test  conducted  by  Network  World  Lab 
Alliance  member  David  Newman,  the  Catalyst  4948- 
10GE  came  up  aces  in  all  configurations.  These 
involved  Layer  2  and  3  switching,  virtual  LANs  and 
Open  Shortest  Path  First  routing.  The  Catalyst  4948- 
10GE  delivered  record  low  latency  hovering  in  the 
range  of  4  microsec  for  most  frame  lengths,  and  line- 
rate  throughput  of  as  many  as  101.19  million  frames 
per  second. 

Newman  commended  Cisco  on  its  work  in  the 
security  arena,  too. The  box  sports  standard,  compet¬ 
itive  security  measures  such  as  support  for  802. IX 
user  authentication,  Secure  Shell  v2  for  remote 
access  and  access-control  lists.  The  switch  offers 
many  other  security  features,  as  well.The  port  securi¬ 
ty  feature  allows  the  switch  to  learn  the  media  access 
control  (MAC)  addresses  of  attached  hosts,  even 
across  reboots,  preventing  spoofing  and  boosting 
reliability  DHCP  snooping  enables  the  switch  to  lis¬ 
ten  for  and  reject  responses  from  rogue  DHCP 
servers.The  IP  source-  guard  feature  builds  on  DHCP 
snooping  to  prevent  an  attacker  from  using  a  legiti¬ 
mate  user’s  IP  address  to  inject  spoofed  traffic. 

Since  our  test,  Cisco  has  added  support  for  Net¬ 
work  Admission  Control  so  that  the  switch  could 
work  with  the  Cisco-based  NAC  scheme  to  lock  out 
or  quarantine  client  machines  that  do 
not  meet  corporate  security  policy 
standards. 

On  tap  for  the  Catalyst  4948-1  OGE  are 
the  addition  of  Web  Cache  Commun¬ 


ication  Protocol  v2,  a  Cisco-developed  content-rout¬ 
ing  technology  that  enables  Layer  3  switches  to  redi¬ 
rect  content  requests  to  appropriate  back-end 
caching  engines,  and  support  for  the  Virtual  Router 
Redundancy  Protocol  Cisco  says.  This  proto¬ 
col  allows  a  group  of  routers  to  function  as  one  vir¬ 
tual  router  by  sharing  one  virtual  IP  address  and  one 
virtual  MAC  address. 

On  the  business  side,  Rajiv  Ramaswami  became 
vice  president  and  general  manager  for  the  Gigabit 
Systems  Business  Unit  and  the  Transceiver  Module 
Group,  where  he  is  responsible  for  Cisco’s  midrange 
Ethernet  switching  and  optical  modules  businesses. 
Previously  Ramaswami  led  Cisco’s  optical  business. 

□  FUTURE  TESTS:  In  addition  to  having  con¬ 
ducted  the  first  public  test  of  Web  front- 
end  devices  (results  published  last 
month,  DocFinder:  2349),  our 
plans  include  testing  single 
switch/routers  and  server 
configurations  that  piqued 
our  interest  with  new  levels 
of  power  and  feature  sets. 


□  Sun  earned  two  finalist  rankings  in  this  category. 
The  Sun  N2120V  content  switch  picked  up  kudos 
from  tester  David  Newman  for  its  good  performance, 
with  support  for  as  many  as  1.25  million  concurrent 
connections  and  as  many  as  230,000  new  connections 
set  up  each  second.  This  makes  the  Sun  box  a  fit  for  all 
but  the  very  largest  data  centers.  The  key  differentiator 
is  the  N2120V’s  ability  to  let  users  define  multiple 
switching  and  routing  domains  on  a  single  box 
(DocFinder:  2347). 

□  Sun’s  SunFireT2000  server  is  powered  by  the 
first-ever  eight-core  UltraSPARC  chip,  based  on  Sun’s 
reduced  instruction  set  chip  UltraSPARC  T1  architecture 
all  packed  into  a  2U-high,  385-watt  server  (DocFinder: 
2348).  Lab  Alliance  member  Tom  Flenderson  found  the 
T2000  to  be  unusual  (in  a  good  way)  in  that  it  gave  per¬ 
formance  numbers  unmatched  for  the  power  and 

space  it  consumes. 


PRODUCT  MASTERMIND: 

John  McCool,  \  i  / 

senior  vice  president  and  ^  ' 

S  genera!  manager  for  the  Internet  ( 

|  Systems  Business  Unit  '  J 

JOB  DUTIES:  Had  been  general 
manager  of  Cisco’s  Gigabit  Systems 
Business  Unit,  where  he  was  responsible  for 
products  and  technology,  including  the 


profit/loss  margins  of  the  line.  He  has  since 
been  promoted.  FAVORITE  FEATURE: 
"The  single  ASIC  chipset  design  of  the 
Catalyst  4948  series,  because  it  provides 
ultra  low  latency,  which  optimizes  this  prod¬ 
uct  for  server  aggregation.” 

P  (TJ  :USER  TAKE: 

1  □  Linda  Beavers,  IT  WAN 


officer,  Riverside  County,  in  Riverside,  Calif. 
DEPLOYMENT:  Recently  added  the  switches 
to  build  up  the  throughput  of  the  data  transfer 
to  lOGbps.  "We  process  financials  and  heavy 
records  through  this  system,  to  which  every 
organization  has  to  have  access.”  FAVORITE 
FEATURES:  Because  of  its  scalability,  it 
“affords  us  the  opportunity  to  upgrade  at  our 
leisure  [to  support]  servers  performing  at  1G 


transfer 

rates.”  BIGGEST  BENEFITS:  These  are 
"improved  management  and  support  of  the 
devices  and  increased  reliability  for  faster 
connectivity  and  throughput  for  the  county's 
overall  processes  to  meet  or  exceed 
24/7/365  uptime.  It  supports  an  enterprise 
application  that  must  be  available  to  40-plus 
departments  and  agencies.” 


LEAST  PRIVILEGE  COMPLIANCE 


IS  NOW  IN  YOUR  HANDS 


In  today's  corporate  environment,  it’s  not  an  option.  DesktopStandard’s  Group  Policy  extensions 
take  you  beyond  built-in  Windows  security  management,  giving  you  the  power  to  limit  rights  and  privileges  to 
the  least  required  for  authorized  tasks.  Reduce  the  complexity  of  managing  your  distributed  desktop  environ¬ 
ment  while  increasing  security  and  compliance.  Find  out  how  at  www.desktopstandard.com. 


©  2005  Desktopstandard  Corporation.  All  rights  reserved. 


desktopstandard 

manage  with  standards. 


BEST 


WINNING  COMPANY  >  HP  lZ3  WINNING  PRODUCT>OpenView  Network  Node  Manager,  OpenView  Operations,  OpenView  Internet  Services 


hile  this  category  has  ballooned  to  include  IP  address  manage¬ 
ment  and  Web  site  management,  in  picking  the  winner  we  stuck 
with  the  basics  of  what  constitutes  network  management  and 
awarded  HP’s  OpenView  Network  Node  Manager,  OpenView 
Operations  and  OpenView  Internet  Services  the  Best  of  the  Tests  honor. 


In  our  early  December  2005  test,  Network  World 
Lab  Alliance  member  Barry  Nance  wrote  that  HP’s 
framework  express  system  excelled  in  network  dis¬ 
covery,  root-cause  problem  analysis,  task  automa¬ 
tion,  responsive  and  intuitive  user  interface,  and 
scalability  (www.nww.com;  DocFinder:  2327).  In 
particular,  Nance  was  impressed  by  HP’s  Advanced 
Intelligent  Diagnosis  for  Networks,  which  he  point¬ 
ed  out  “was  especially  helpful  in  zeroing  in  on  a  spe¬ 
cific  device  that  was  causing  an  outage  or  perform¬ 
ance  problem.”The  system’s  path-analysis  capability 
earned  kudos  for  helping  pinpoint  problems  and 
performance  degradations  involving  our  test  net¬ 
works’  pathways  and  linkages. 

Nance  also  lauded  the  OpenView  Internet  Ser¬ 
vices  module,  which  “excelled  at  tracking  Web  trans- 
action-oriented  [service-level  agreement]  viola¬ 
tions.”  The  system  could  note  availability  and 


HP  OpenView  offered  first- 
rate  system  path  analysis. 


:PR0DUCT  MASTERMIND: 

Bob  Steiner,  x  i  , 

director  OpenView  Network 
Services  Management 

JOB  DUTIES:  Steiner  sets  prod¬ 
uct  direction  across  the  OpenView 
portfolio.  FAVORITE  FEATURE: 

“The  advanced  problem  analyzer,  which 
enables  rapid  root-cause  analysis  of  transient 


response-time  details  from  general  Web  access  to 
particular  e-mail  commerce  transactions,  as  well  as 
send  alerts  when  those  SLA  parameters  were 
exceeded. 

Since  our  testing,  HP  has  added  to  the  OpenView 
portfolio.  New  OpenView  Management  Software, 
unveiled  in  early  December,  includes  the  OpenView 
Dashboard  1.0  (software  for  building  a  personal¬ 
ized,  real-time  view  into  the  health  of  critical  busi¬ 
ness  and  IT  services);  OpenView  Business  Process 
Insight  2.0  (monitors  and  reports  business  process 
health  and  predefined  metrics);  OpenView  Service 
Desk  integration  (designed  for  closed-loop  opera¬ 
tions  to  reduce  costs  and  automate  IT  response  to 
business  needs);  and  OpenView  Short  Engagement 
Services  (onsite  consulting  services). 

HP  also  made  a  few  acquisitions  at  the  tail  end  of 
2005.  It  acquired  Trustgenix  to  help  bolster  identity 
management  within  OpenView.  With  the  Trustgenix 
technology  the  company  should  extend  the  federa¬ 
tion  capabilities  of  HP  OpenView  so  enterprise  cus¬ 
tomers  can  give  business  partners  secure  access  to 
information  residing  on  different  systems,  HP  says. 

With  its  acquisition  of  Peregrine  Systems,  HP 
picked  up  technology  for  asset  tracking,  process 
automation,  enterprise  discovery  and  business 
continuity  and  consolidation  management. 

□  FUTURE  TESTS:  We  are  always  inter¬ 
ested  in  network  analysis  software.  We 
also  plan  to  test  WAN  acceleration/opti¬ 
mization  products,  and  desktop  and  serv¬ 
er  configuration  management  tools. 


faults  and  performance  problems  in  today’s 
dynamic  enterprise  networks.” 

:USER  TAKE: 

□  Jim  Livingston, 

technology  architect  and 
director  of  the  Data  Resource  Center  at  the 
University  of  Utah  Health  Sciences  Center,  in 
Salt  Lake  City 


DEPLOYMENT:  The  Health 
Sciences  Center  began  using 
OpenView  in  1995,  adding  the 
Service  Information  Portal  and 
Internet  Services  in  2005. 

FAVORITE  FEATURES:  The  ability  to  do 
service-oriented  monitoring;  integrate  third- 
party  monitoring  products  and  “a  powerful 
development  platform.”  Also  OpenView 


NETWORK 

MANAGEMENT  FINALISTS 

□  In  our  IP  address  management  test  (DocFinder:  2328), 
Lucent’s  VitalQIP  hung  on  as  king  of  the  jungle.  We  named 
VitalQIP  a  finalist  for  its  fast  performance,  scalability  and 
feature-rich  options  for  dealing  with  IP  addresses.  The 
Lucent  software  "is  an  enterprise-ready  tool  to  organize  and 
manage  virtually  any  set  of  IP  addresses,  no  matter  how 
large  or  complex,”  Lab  Alliance’s  Nance  said. 

□  In  the  same  test  (DocFinder:  2328),  Metalnfo  earned 
the  final  nod  for  its  Meta  IP  Enterprise  system.  The  sys¬ 
tem  offers  excellent  security  and  reporting  features,  as  well 
as  flexible  IP  address  management,  Nance  said.  In  particular, 
he  liked  how  the  Meta  IP  DNS  service  could  closely  integrate 
with  Microsoft  Active  Directory  —  in  our  tests,  we  were  able 
to  use  the  Windows  Active  Directory  wizard  to  easily  link  a 
domain  controller  to  Meta  IP 

□  Microsoft  gets  a  finalist  nod  for  its  Virtual  Server 
2005  offering,  which  lets  you  run  multiple  instances  of 
Windows  on  the  same  machine,  based  on  a  test  conducted 
by  Lab  Alliance  member  Tom  Henderson  (DocFinder:  2322). 
Microsoft’s  foray  into  server  consolidation,  via  technology  it 
picked  up  with  a  2003  purchase  of  Connectix,  is  proving 
worthwhile,  Henderson  said.  Along  with  the  Virtual  Server 
Migration  Kit,  Virtual  Server  2005  "provides  a  way  to  grace¬ 
fully  move  and  consolidate  older  Windows  NT  and  2000 
Server  applications  onto  newer  (and  ostensibly  higher-capac¬ 
ity)  hardware.” 

□  TechSmith  earned  a  finalist  spot  for  its  Morea  soft¬ 
ware,  which  improves  the  Web  page  usability  testing  process 
for  companies.  Lab  Alliance  member  Thomas  Powell  found 
that  Morea  can  "help  collect  some  valuable  data  concerning 
how  easily  users  can  —  or  can’t  —  navigate  your  site” 
(DocFinder:  2330).  The  software  leverages  its  experience 
with  screen  recording  and  capturing  methods  found  in 
TechSmith’s  popular  Snaglt  and  Camtasia  products. 

□  Coradiant’s TrueSight  1100  appliance  impressed 
us  with  its  ability  to  actively  monitor  Web  site  traffic,  giving 

a  heads-up  on  the  true  health  and  performance  of  a  Web  site 
(DocFinder:  2331).  It  “acts  as  a  smart  microscope  for  Web 
administrators  who  want  an  in-depth  look  at  their  site’s  net¬ 
work  traffic  for  incident  resolution,”  Powell  said. 


Internet  Services  "allows  us  to  mimic  the 
user  experience.”  BIGGEST  BENEFITS: 
"We  can  easily  drill  down  through  the  service 
map  to  find  problems.” 


Why  maintain 
separate  SAN 
and  NAS  systems 
when  you  can 

consolidate  both. 


One  system,  multiple  choices.  The  Pillar  Axiom™  enterprise 
storage  system  enables  SAN,  NAS,  or  both  in  a  single  storage 
environment  —  all  managed  through  one  powerful  user  interface. 
The  Pillar  Axiom  lets  you  add  performance  and  capacity  up  to 
300  TB  per  system,  without  multiple  software  license  fees.  And 
because  it's  priced  lower  than  what  many  companies  pay  just  to 
maintain  their  storage  systems,  Pillar  is  the  alternative  you've 
been  looking  for. 

To  learn  how  Pillar  is  giving  customers  a  better  choice  for 
networked  storage,  schedule  a  no-obligation  half-hour  briefing. 

Call  1-877-252-3706  orvisitwww.pillardata.com/both 

Learn  the  truth  about  networked  storage. 


©  2006  Pillar  Data  Systems  Inc.  All  rights  reserved.  Pillar  Data  Systems,  Pillar  Axiom, 
and  the  Pillar  logo  are  all  trademarks  of  Pillar  Data  Systems. 
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Infrastructure0 


Firewalls ,  intrusion-detection  systems 
security  appliances,  SSL  VPNs ) 


□  winning  company>  Juniper  Networks  □  WINNING  PRODUCT>Secure  Access  SSL  VPN  Appliance 


uniper  Networks  has  gone  two  for  two  —  Secure  Access  SSL  VPN 
Appliance  swept  the  competition  in  our  December  '05  test  of  11  SSL 
VPN  products  as  well  as  the  finalists  in  this  Best  of  the  Tests  category 
for  the  second  year  in  a  row  (www.nww.com,  DocFinder:  2350). 


Network  World  Lab  Alliance  member  Joel  Snyder 
called  the  Secure  Access  SSL  VPN  Appliance  “the 
best  choice  for  most  enterprise  deployments  from 
among  the  [SSL  VPN]  products  we  tested.”The  appli¬ 
ance  posted  high  scores  across  all  test  areas,  includ¬ 
ing  access  control,  interoperability  manageability, 
user  portal  experience,  high  availability  and  authen¬ 
tication.  Juniper  received  4.5  out  of  5  points. 

In  determining  Juniper  as  the  Best  of  the  Tests  win¬ 
ner,  we  also  took  into  consideration  reader  interest  in 
the  blowout  SSL  VPN  test,  which  had  more  than 
70,000  Web  hits  in  three  weeks. 

The  Juniper  appliance  should  make  your  short  list 
for  complex  access-control  environments,  especially 
where  there  are  difficult  application-translation  prob¬ 
lems  and  extranet-focused  line-of-business  projects, 
Snyder  said.  Also  impressive  is  Juniper’s  thinking  in 
areas  such  as  client  efficiency  (with  its  combination 
SSLVPN/IPSec  VPN  approach  to  remote  access), and 
the  extreme  management  and  deployment  flexibility 
of  the  Secure  Access  product,  he  added.  “There’s 
almost  no  SSL  deployment  where  putting  Juniper  in 
would  be  a  big  mistake,  an  endorsement  we  don’t 
give  lightlyf  he  said. 

Since  our  test,  Juniper  has  enhanced  the  endpoint 
defense  capabilities  by  integrating  Symantec’s  mal¬ 
ware  protection. 


This  lets  users  provide  secure  employee  and  part¬ 
ner  remote  access  with  increased  protection  from 
eavesdropping  threats.  The  integrated  malware 
protection  is  dynamically  provisioned  to  the  end¬ 
point,  so  no  client  software  needs  to  be  installed 
on  individual  computers. 

With  its  December  acquisition  of  Funk  Software, 
Juniper  picked  up  technologies  that  protect  the 
integrity  of  the  network  by  ensuring  both  the  user 
and  the  device  meet  an  organization’s  security 
policies  before  they  are  granted  access.  This  tech¬ 
nology  will  be  integrated  into  the  SSL  VPN  appli¬ 
ances,  Juniper  says. 

□  FUTURE  TESTS:  This  year,  we’ve  already  taken 
an  exclusive  look  at  Juniper’s  new  Secure  Services 
Gateway  520  and  550  gigabit  firewalls  (DocFinder: 
2363),  and  we’ll  continue  to  test  new  and  interest¬ 
ing  product  twists  in  that  market. We’ll  be  pushing 
the  performance  of  intrusion-prevention  systems 
in  late  spring  and  testing  the  abilities  of  the  new 
products  on  the  market  geared  toward  thwarting 
zero-day  attacks. 

This  Juniper  SSL  VPN  appliance 
rated  high  in  all  test  areas. 


SECURITY 

INFRASTRUCTURE  FINALISTS 

□  F5  Networks’  FirePass  4100  and  Nokia’s  Secure 
Access  System  500s  earned  finalist  spots  for  their  per¬ 
formances  in  our  SSL  VPN  test  (DocFinder:  2350).  The 
Firepass  got  high  marks  for  providing  easy,  secure  remote 
access  to  users,  Snyder  said.  The  product  is  a  perfect  fit  for 
many  environments,  such  as  in  cases  of  employee  remote 
access  where  users  are  fully  or  partially  trusted,  he  added. 
The  Nokia  SSL  VPN  impressed  Snyder  with  its  fine-grained 
access  control.  "If  you’re  a  security  and  control  freak, 

Nokia’s  strategy  should  hit  your  comfort  level,”  Snyder 
wrote.  The  SSL  VPN  should  be  especially  interesting  to  enter¬ 
prises  that  have  settled  on  Nokia  firewalls,  with  commonality 
to  configuration  and  ongoing  management  parameters. 

Unlike  most  SSL  VPN  vendors,  Nokia  offers  a  heavy  suite  of 
services  on  the  underlying  appliance,  such  as  IPSec,  cluster¬ 
ing  and  dynamic  routing. 

□  Check  Point’s  VPN-1  Edge  W  touts  wireless  access 
support,  better  performance  and  a  new  print  server 
(DocFinder:  2351).  Ties  to  Check  Point’s  wider  VPN  product 
line  also  was  a  plus  for  this  product.  We  tested  VPN-1  Edge 
W  with  a  Check  Point  NG  firewall  and  were  able  to  bring  up  a 
tunnel  within  a  few  seconds.  An  elegant  feature  of  Check 
Point’s  overall  VPN  architecture  is  the  dynamic  pushing  of 
network  configuration,  meaning  that  the  Edge  W  doesn’t 
have  to  be  configured  to  know  anything  about  the  central 
VPN  server  besides  its  IP  address  and  how  to  authenticate. 

□  SonicWall’s  Pro  1260  Enhanced  earned  finalist  sta¬ 
tus  for  appropriately  combining  the  brains  of  SonicWall’s 

popular  TZ-series  firewalls  with  the  body  of  a  25-port 
managed  10/100Mbps  switch,  Synder  said  (DocFinder: 
2352).  Synder  also  liked  the  revamped  SonicOS  software, 
which  lets  each  firewall  port  be  configured  with  its  own 
security  zone.  You  can  set  up  an  individual  firewall  for  every 
system  in  a  demilitarized  zone,  preserving  the  DMZ  zone 
even  if  any  one  system  sitting  behind  the  firewall  is  cracked. 


PRODUCT  MASTERMIND: 

Sam  Srinivas, 

distinguished  engineer 

JOB  DUTIES:  Leads  design  ^ 
and  development  of  the  SSL  VPN 
products  and  technology  advance¬ 
ment. 

FAVORITE  FEATURE:  "The  Content 
Intermediation  Engine  [also  known  as  the 
rewrite!'],  combined  with  our  granular 


access  control  capabilities,  continues  to  be 
the  functionality  that  solves  some  of  the 
most  complex  problems  within  VPN/extranet 
deployments.  Customers  have  deployed  our 
rewriter  engine  and  dynamic  access  man¬ 
agement  functionality  to  securely  extend 
application  access  to  partners,  customers 
and  employees  via  a  Web  browser  with  no 
end-user  changes,  no  software  installation 
and  no  server/data-center  modifications." 


:USERTAKE: 
□  Doug  Torre, 


ig 

IT  director,  Catholic  Health  System, 
in  Buffalo,  N.Y. 

DEPLOYMENT:  Implemented  the  Juniper 
SSL  VPN  appliance  three  and  a  half  years  ago 
because  it  had  all  the  necessary  functionality 
and  a  rapid  ROI  for  its  main  application.  This 
replaced  an  open  source  SSL  VPN  project 


under  way.  FAVORITE  FEATURE:  "The 
ability  to  aggregate,  encapsulate  and  wrap  all 
of  our  remote  access  without  exposing  indi¬ 
vidual  IP  addresses  and  network  ports.” 
BUSINESS  BENEFITS:  With  the  SSL  VPN 
appliance,  we  get  "easier  and  more  secure 
remote  access  without  a  lot  of  user  support 
hassles.” 
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Introducing  the  industry’s  highest  performance  Ethernet 
switch  family  ready  to  deliver  wire-speed  non-blocking 
performance  to  1.14  billion  packets  per  second  (or  up  to 
3.42  bpps  per  7-foot  telco  rack).  Foundry’s  Biglron  RX  Series 
offers  the  highest  density  Gigabit  and  10  Gigabit  Ethernet 
switching  and  routing  solution  in  the  industry  and  is  built  on  a 
distributed  and  redundant  switch  architecture  that  ships  ready  to 
support  100  Gigabit  Ethernet.  Featuring  support  for  scalable 
Ethernet  switching,  IPv4/IPv6  routing,  consistent  low  latency 
for  all  packet  sizes  and  advanced  quality  of  service  design,  the 
Biglron  IOC  Series  meets  and  exceeds  the  needs  of  a  wide  range 
of  environments  including  Enterprise  LAN,  HPC,  MANS,  and 
next  generation  data  centers. 
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FOUNDRY 

NETWORKS 

The  Power  of  Performance™ 


Find  out  more  about  the  BigIron  RX  Series  and  how 
YOU  CAN  REDEFINE  PERFORMANCE  AND  RELIABILITY  IN  YOUR 
NETWORK.  LOG  ON  TO  WWW.FOUNDRYNET.COM/BlGlRONRX. 


For  MORE  INFORMATION  PLEASE  CALL:  US/CANADA  1  BBS  TURBOLAN.  jp 
INTERNATIONAL  +1  40B.586.1700  OR  VISIT  OUR  WEBSITE  AT  WWW.FOUNDRYNt’f 


Foundry  Networks,  Inc.  is  a  leading  provider  of  high-performance  Enterprise  and  Service  Provider  switching,  routing  and  Web  traffic  management  solutions  including  Layer  2/3  LAN  switches. 
Layer  3  Backbone  switches.  Layer  4-7  Web  switches,  wireless  LAN  and  access  points,  access  routers  and  Metro  routers.  Foundry’s  8,500  customers  include  the  world's  premier  ISPs,  metro  service 
providers,  and  enterprises  including  e-commerce  sites,  universities,  entertainment,  health  and  wellness,  government,  financial,  and  manufacturing  companies. 

©  2005  Foundry  Networks®,  the  Foundry  logo,  The  Power  of  Performance™,  Foundry™,  and  Biglron®  RX  Series  are  trademarks  of  2005  Foundry  Networks,  Inc. 

All  Rights  Reserved.  All  other  marks  are  trademarks  of  their  respective  owners. 
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(  Group  policy  administration  tools,  identity  management  products,  network 

' 

forensics  tools,  patch  management  tools,  vulnerability  alerting  services 


j  winning  company> Symantec  □  winning  PRODua>DeepSight  Alert  Services 


our  thousand  six  hundred  seventy-five:  That’s  the  number  of  com¬ 
puter-related  vulnerabilities  the  National  Institute  of  Standards  and 
Technology  tracks  and  reports  in  its  National  Vulnerability  Database. 
More  than  1,800  of  those  are  deemed  to  be  of  high  severity. 


Such  is  the  reason  we  picked  Symantec’s 
DeepSight  Alert  Services  as  the  Best  of  the  Tests 
winner  in  this  category.  DeepSight  performed  tops 
in  our  test  of  vulnerability  alerting  services,  which 
help  enterprise  security  managers  sort  out  which 
vulnerabilities  will  directly  affect  their  networks 
and  offer  up  remediation  suggestions 
(www.nww.com,  DocFinder:2329). 

Network  World  Lab  Alliance 
member  Mandy  Andress  found 
these  services  generally  useful 
because  they  help  filter  the 
myriad  alerts.  With  these  serv¬ 
ices  in  place,  IT  security  per¬ 
sonnel  can  focus  on  crafting 
remediation  plans  rather  than 
on  combing  through  mailing  lists 
and  vendor  sites  for  new  alerts. 

Symantec’s  DeepSight  Alert  Services  (we  tested 
Version  6.0),  which  the  company  picked  up  in  its 
2004  acquisition  of  SecurityFocus.came  out  as  our 
Clear  Choice  winner  with  a  4.88  out  of  5  rating. 
Specifically,  it  provided  the  most  delivery  options, 
offered  very  detailed  reports,  supported  a  plethora 
of  alert  category  configuration  options  and  regis¬ 
tered  very  quick  response  times  in  that  test, 
Andress  found. 

Symantec  released  DeepSight  Alert  Services  7.0 
in  January  This  upgrade  delivers  new  vulnerability, 
malicious  code,  spyware  and  adware  alerts. 

Symantec  also  recently  announced  plans  to 
acquire  IMLogic,  maker  of  enterprise  software  for 
instant  messaging.  Following  the  acquisition, 
which  is  scheduled  to  close  later  this  quarter, 
Symantec  will  immediately  integrate  IMLogic’s 
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Symantec  DeepSight  Threat  Manageme 

^SBRBSB  r'ri'  'r,''"rr- ’’ 1  "  1 ''  '"j.'1' 

Events  Over  Last  24  Hours 


This  global  map  displays  tha  number  of  firewall 
or  IDS  events  reported  by  the  DeepSight  Global 
Sensor  network  during  the  last  24  hours.  The 
events  are  aggregated  to  give  a  continental 
view  of  Internet  events. 


our 


Symantec’s  DeepSight  Alert  topped 
tests  with  its  detailed  reports  and  quick 
response  times. 


threat  detection  and  remediation  for  IM  into  its 
early  warning  and  response  system.  The  soft¬ 
ware  will  augment  the  capabilities  of  Symantec 
Security  Response,  the  company’s  security 
research  center. 

□  FUTURE  TESTS:  This  year  we’ll  be  looking  at 
new  classes  of  products,  such  as  those  that  help 
define  system  security  policy  and  identify  sys¬ 
tems  out  of  compliance,  and  help  security  man¬ 
agers  to  take  remediation  actions.  We’ll  test  data 
leakage  management  products  for  the  first  time. 
And  we’ll  also  take  several  more  passes  at  vul¬ 
nerability  assessment  tools  in  a  variety  of  smaller 
tests  based  on  how  the  products  attack  the  prob¬ 
lem  of  pinpointing  network  holes. 


PRODUCT  MASTERMIND: 

Dee  Liebenstein,  I 

group  product  manager  '  ' 

s  JOB  DUTIES:  Liebenstein 
I  focuses  on  business  case  and 
I  customer  requirements  for 
DeepSight  Threat  Management 
System  and  DeepSight  Alert  Services, 
Symantec’s  early-warning  solutions. 


FAVORITE  FEATURE:  "The  domain  alerts 
feature  is  a  favorite  because  targeted 
attacks  are  on  the  rise.  This  feature  notifies 
an  organization  when  its  company  domain  is 
being  specifically  named  in  a  malicious  code 
payload.  This  proactive  notification  enables 
businesses  to  quickly  take  appropriate  steps 
to  mitigate  the  threat  and  protect  them¬ 
selves  and  their  customers.” 


:USERTAKE: 


SECURITY 

MANAGEMENT  FINALISTS 

□  In  the  vulnerability  alerting  services  test,  Cybertrust’s 
Alert  Manager  placed  a  close  second  to  Symantec’s 
DeepSite  Alert  Services  with  an  overall  score  of  4.5  out  of 
5  (DocFinder:  2329).  While  Alert  Manager  fell  a  bit  behind  in 
alert  delivery  options,  it  stood  strong  in  terms  of  the  type  of 
vulnerability  information  it  provided  and  the  format  in  which 
that  data  could  be  served  up  to  an  enterprise  security  man¬ 
ager.  Cisco  acquired  Cybertrust  in  November  2005,  and 
renamed  the  product  Intellishield  Alert  Manager. 

□  Guidance  Software’s  EnCase  Enterprise  im¬ 
pressed  Lab  Alliance  member  Sam  Stover  for  its  enterprise 
incident-response  and  forensic  capabilities,  especially  from  a 
vendor  traditionally  focused  on  law  enforcement  (DocFinder: 
2332).  EnCase  Enterprise’s  ability  to  help  a  network  investi¬ 
gator  establish  relationships  between  open  ports,  open  files, 
network  connections,  hidden  files  or  processes  and  malicious 
network  activity  is  the  product’s  most  useful  functionality, 
Stover  said. 

□  NetlQ  Group  Policy  Guardian  and  Group  Policy 
Administrator  earned  its  finalist  spot  as  the  top  performer 
in  our  test  of  products  that  build  on  top  of  Microsoft’s  Active 
Directory  Group  Policy  administration  to  provide  advanced 
assistance  with  access  control,  reporting,  change  manage¬ 
ment  and  security  auditing  functionality.  NetIQ’s  two-product 
package  earned  our  top  honors  based  on  its  breadth  of  fea¬ 
tures,  with  specific  prowess  in  auditing  and  change  manage¬ 
ment  capabilities  (DocFinder:  2333). 

□  In  a  stand-alone  test,  Thor  Technologies’  Xellerate 
Identity  Manager  collected  high  grades  from  Lab  Alliance 
member  Mandy  Andress  for  providing  extremely  flexible 
account  provisioning  mechanisms  across  a  multitude  of  prod¬ 
ucts  and  technologies,  supporting  even  the  most  complex  of 
business  workflows  (DocFinder:  2334).  Oracle  acquired  Thor 
late  last  year,  with  plans  to  roll  this  product  into  its  identity 
management  suite. 


p  CP 

1  □  Jim  Jeffers, 

chief  business  continuity  officer,  Cigna, 
in  Philadelphia 


DEPLOYMENT:  Began  using  DeepSight 
Alert  Services  in  March  2005,  in  conjunction 
with  Symantec-provided  managed  security 
services.  FAVORITE  FEATURE:  “The  first 
is  the  analysis  they  provide  throughout  the 


world.  That  gives  us  a  pulse  of  what’s  going 
on,  and  we  can  leverage  Symantec’s  real¬ 
time  experience.  Second  are  the  different 
reporting  capabilities.”  BUSINESS  BENE¬ 
FITS:  "Basically,  the  biggest  benefit  is  the 
ability  to  stay  on  top  of  things,  adding  to  the 
intelligence  we  have  to  see  what’s  going  on 
in  our  environment.” 


Chaos,  now  under 
your  control. 


HP  PROLIANT  BL35p  BLADE  SERVER 


with  ProLiant  Essentials  Management  Software 

•  Up  to  2  Dual-Core  AMD  Opteron™  200  Series  processors 

•  High  density:  Up  to  96  servers  per  rack 

•  Flexible/Open:  Integrates  with  existing  infrastructure 

•  HP  Systems  Insight  Manager™:  Web-based  networked 
management  through  a  single  console 


Rapid  Deployment  Pack:  For  ease  of  deployment  and 
ongoing  provisioning  and  reprovisioning 


HP  BladeSystem  servers  offer  tools  to  help  you  keep  pace  with  fluctuating  demands.  The  HP 


•  Integrated  Cisco  or  Nortel  switch  options 

Save  up  to  $1,200  Instantty  on  the  purchase  of  the 
HP  ProLiant  BL35p  Blade  Server.' 


ProLiant  BL35p  Blade  Server  is  designed  to  relieve  some  of  the  stress.  Its  AMD  Opteron™ 
processors  offer  dual-processor  power  with  breakthrough  efficiency.  With  management 


features  like  the  Rapid  Deployment  Pack  that  lets  you  deploy  and  redeploy  blades  without 
missing  a  beat,  and  a  single-view,  graphical  user  interface  that  streamlines  monitoring 
and  configuration,  HP  BladeSystem  servers  work  with  you  so  you  don't  have  to  work  so 


HP  STORAGEWORKS  MSA1500cs 


with  StorageWorks  Essentials  Management  Software 

•  Up  to  24TB  of  capacity  (96  250GB  SATA  drives) 

■  Up  to  16TB  of  capacity  (56  300GB  SCSI  drives) 

•  Ability  to  mix  SCSI  and  Serial  ATA  enclosures  for 
greater  flexibility 

■  2GB/1GB  Fibre  connections  to  host 

Get  2TB  of  storage  free  ($2,008.80  vaiue)- 


hard.  And,  bundled  with  the  StorageWorks  MSA1500cs,  you  can  reduce  the  cost  and 
complexity  of  deploying  a  storage  area  network  giving  you  a  better  return  on  investment. 

Save  up  to  $1,200  instantly  on  the  purchase  of  the  HP  ProLiant  BL35p  Blade  Server.1 


SMART  ADVICE  >  SMART  TECHNOLOGY  >  SMART  SERVICES 


Call  1-888-223-5441 
Click  hp.com/go/bladesmag49 
Visit  your  local  reseller 


1 .  Save  up  to  $1 ,200  instantly  on  the  purchase  of  the  HP  ProLiant  BL35p  Blade  Server.  Offer  valid  through  4/30/06. 2.  Receive  up  to  2TB  of  storage  free  with  purchase  of  HP  StorageWorks  Modular  Smart  Array  1 500cs  devices.  Offer  valid  through  4/30/06.  All  offers  available 
from  HP  Direct  and  participating  resellers.  Prices  shown  are  HP  Direct  prices,  are  subject  to  change  and  do  not  include  applicable  state  and  local  sales  tax  or  shipping  to  recipient's  destination.  Reseller  prices  may  vary.  See  Web  site  for  full  details.  Photography  may  not 
accurately  represent  exact  configurations  priced.  Associated  values  represent  HP  published  list  price.  AMD,  the  AMD  Arrow  Logo,  AMD  Opteron  and  combinations  thereof  are  trademarks  of  Advanced  Micro  Devices,  Inc.  ©2006  Hewlett-Packard  Development  Company,  L.P. 
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switches 


winning  company >  Aruba  Networks  □  winning  products >A2400  and  A800  switches  and  A61  access  point 


ur  voice-over-wireless  test  conducted  early  last  year  showed  that  pro¬ 
viding  just  a  small  amount  of  data  traffic  on  the  same  wireless  net¬ 
work  as  voice  traffic  could  lead  to  seriously  degraded  audio  quality 
and  dropped  calls,  even  with  QoS  features  enabled  (www.nww. 
com,  DocFinder:  2325).  However,  one  set  of  wireless  products  proved  capable  of 
handling  the  mixed  load:  Aruba  Wireless  Networks  A2400  andA800  switches  and 
A61  access  point.  That  is  the  reason  we  selected  these  products  as  the  Best  of  the 
Tests  winners  in  the  Wireless  category. 


“While  some  products  struggled  mightily  in  our 
tests,  Aruba’s  A2400  and  A800  switches  and  A61 
access  points  were  consistently  strong  performers,” 
wrote  Network  World  Lab  Alliance  partner  David 
Newman.  “The  Aruba  products  posted  generally 
excellent  numbers,  regardless  of  how  much  voice  or 
data  traffic  was  thrown  at  them.” 

Since  our  test,  Aruba  has  made  many  enhance¬ 
ments  to  its  VoWi-Fi  feature  set.  In  particular,  Aruba 
introduced  its  Mobile  Edge  architecture,  which  cre¬ 
ates  an  intelligent  overlay  system  that  spans  a  com¬ 
pany’s  LAN  and  WAN  as  well  as  the  Internet.  Users 
plugging  an  Aruba  access  point  into  any  Internet 
connection  can  then  use  a  mobile  VoIP 
handset  to  connect  to  corporate  voice 
resources  securely.  Other  enhanced 
VoWiFi  features  include:  voice  flow 
classification  (packet  inspection 
and  classification  for  advanced 
VoWiFi);  advanced  call  admission 
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control  (monitors  a  call’s  state  and  load  balances 
voice-capable  devices  for  network  availability  and 
performance  assurance);  QoS  policing  (raises  or  low¬ 
ers  priority  based  on  user’s  role  and  traffic  type); 
voice-aware  scanning  (inhibits  an  access  point  from 
scanning  other  channels  during  active  voice  calls); 
and  voice  client  security  (allows  access  for  less- 
secure  voice  devices  without  compromising  over¬ 
all  wireless  LAN  [WLAN]  security). 

In  a  major  win,  Microsoft  selected  Aruba  gear  for 
what’s  being  called  the  world’s  largest  next-gener¬ 
ation  WLAN.  The  WLAN  will  serve  more  than 
25,000  simultaneous  users  who  work  in  277 
buildings  in  60  countries,  Aruba  says. 
The  project  —  which  uses  Aruba’s 
mobility  controllers,  software  and 
about  5,000  ultra-thin  Aruba 
access  points  —  gives  Microsoft  a 
single  voice  and  data  network. 

Other  deploy¬ 
ments  for 
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Aruba’s  switches  were  capable  of  handling  a  mixed  load. 


iPRODUCT  MASTERMIND: 

□  Pradeep  Iyer, 

director  of  technology 

JOB  DUTIES:  Creates  and  devel¬ 
ops  product  feature  sets. 

FAVORITE  FEATURE:  "Voice  flow 
classification.  As  mobile  devices 
evolve,  toward  smartphones  and  PDAs,  it’s  criti¬ 
cal  to  prioritize  voice  flows  over  data  flows 
originating  from  the  same  device.  The  Aruba 
mobility  controllers  [can  do  so  with  algorithms 


that  perform]  stateful  packet  inspection  and 
reserve  bandwidth  for  these  flows.” 


:USERTAKE: 

□  Brad  Noblet, 


COO,  Faculty  of  Arts  and  Sciences  (FAS), 
Harvard  University,  in  Cambridge,  Mass. 

DEPLOYMENT:  Noblet  joined  Harvard  in 
January  to  build  a  converged  wireless  net¬ 
work  for  FAS’  30,000  users.  Based  on  the 
experience  he  gained  building  a  similar, 


Aruba  include  Dartmouth  College,  Medstar  and 
University  College  London  Hospital. 

In  addition,  Aruba  joined  the  MobileIGNITE 
Program  for  Mobile  VoIP  Interoperability,  obtained 
SpectraLink  Voice  Interoperability  for  Enterprise 
Wireless  certification  and  completed  interoperability 
and  compatibility  validation  with  Vocera’s  line  of 
voice  communication  badges. 

□  FUTURE  TESTS:  With  all  the  advances  being 
made  in  the  VoWi-Fi  arena,  we  anticipate  another 
test  with  that  focus  this  year.  We  also  will  continue 
to  monitor  wireless  scanners  and  other  tools  that 
help  enterprises  support  wireless  networks. 
Advances  in  wide-area  wireless  technologies  and 
support  for  mobile  devices  continue  to  intrigue  us 
as  well.  Do  the  networks  vary  in  download  and 
upload  speeds  depending  on  device  and  what  city 
you’re  in?  Stay  tuned. 


smaller  network  (800  users) 
at  Dartmouth  College  over 
the  last  several  years,  he 
intends  to  use  Aruba  wireless  switches  and 
access  points.  He  already  has  a  few  such 
switches  at  FAS.  FAVORITE  FEATURES: 
"The  first  is  the  ability  to  load  balance  traffic 
and  the  second  is  the  ability  to  increase  the 
density  of  access  points”  because  of  the 
intelligence  provided  with  the  switches. 
BUSINESS  BENEFITS:  "From  the  user 


WIRELESS  FINALISTS 

□  AirMagnet’s  Spectrum  Analyzer  impressed  us 
for  its  ability  to  help  network  engineers  scan  the  air¬ 
waves  to  find  interfering  noise  sources  within  the  2.4- 
GHz  spectrum  (DocFinder:  2326).  Lab  Alliance  member 
Tom  Henderson  said  he  was  "thrilled  to  be  able  to  track 
all  IEEE  802.11b/g/a  frequencies,  not  just  the  ones  that 
are  legal  in  the  United  States.” 

□  Network  Chemistry’s  BlueScanner,  examined 
in  the  same  Clear  Choice  Test  as  the  AirMagnet  product, 
was  also  impressive,  Henderson  said.  The  free  tool  (via 
download)  can  find  and  articulate  data  about  Bluetooth 
devices,  and  the  service  sets  running  on  them,  within  the 
company.  When  we  tested  the  tool,  BlueScanner  found 
every  Bluetooth  device  we  had,  in  addition  to  finding  all 
of  their  exposed  features.  While  we  couldn’t  fix  expo¬ 
sures  with  the  tool,  finding  them  was  the  biggest  part 

of  the  battle. 


perspective,  the  ability  to  provide  ubiquitous 
communications  across  the  campus,  with  a 
similar  experience  between  wired  and  wire¬ 
less.  Whatever  they  want  to  do  —  watch  TV, 
talk  on  the  phone,  [instant  message]  — 
they  can.  . . .  And,  with  convergence  over  a 
wireless  network,  I  can  save  a  ton  of 
money”  in  staffing  and  technology  costs. 
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BEST 


PRODUCTS 


ISSUE 


CLIENT  SECURITY 

■  Aladdin  Knowledge  Systems 


product 


eSafe 


Ashanti 

Spyware  Defense 

Blue  Coat  Systems 

Spyware  Interceptor 

sCA 

eTrust  PestPatrol  Corporate  Edition 

Check  Point 

Integrity 

Cisco 

Cisco  Clean  Access,  Cisco  Security  Agent 

:  Citadel  Security  Software 

Hercules 

a  Fortinet 

FortiClient  Host  Security 

s  F-Secure 

Anti-Virus  Client  Security 

« Lavasoft 

Ad-Aware  SE  Enterprise  2005 

a  McAfee 

McAfee  AntiSpyware  Enterprise 

■;  McAfee 

Secure  Content  Management  Appliance 

Microsoft 

Windows  AntiSpyware 

w  Omniquad 

AntiSpy  Enterprise 

a  Panda  Software 

EnterpriSecure  with  TruPrevent 

•  Senforce  Technologies 

Senforce  Endpoint  Security  Suite 

m  SunBelt  Software 

CounterSpy  Enterprise 

s  SurfControl 

SurfControl  Enterprise  Threat  Shield 

«  Tangent  Computer 

Packet  Hawk  Enterprise  Anti-Spyware  Appliance 

a  Trend  Micro 

Network  VirusScan,  OfficeScan  7 

*  Trend  Micro 

OfficeScan  Anti-Spyware  Suite  and  InterScan 
Anti-Spyware  Suite 

a  Vernier  Networks  and  PatchLink 

EdgeWall  7000i;  PatchLink  Update  Server 

a  Webroot  Software 

Spy  Sweeper  Enterprise 

a  Websense 

Web  Security  Suite-Lockdown  Edition 

CONVERGENCE 

■  Aastra  Technologies 

VenturelP  system 

■  Agilent  Technologies 

DNA-MX  andTNA  software 

■  Avaya 

Modular  Messaging  System  and  Unified 
Communications  Center 

■  Brix  Networks 

BrixMon 

■  Centra  Software  (now  Saba) 

Centra  7  eMeeting 

■  Cisco 

Unity  Enterprise  and  Personal  Assistant 

■  ClearSight  Networks 

ClearSight  Analyzer 

■  Convoq 

ASAP  Pro  2.0 

■  Elluminate 

Elluminate  Live!  Team  Edition 

■  FaceToFaceMeeting 

FaceToFaceMeeting  business  service 

■  Fluke  Networks 

OptiView  VoIR  Protocol  Expert  Plus  and  Link  Analyzer 

■  Genesys  Conferencing 

Genesys  Meeting  Center 

■  Interwise 

iMeeting  and  Enterprise  Connection 

■  Linktivity,  an  Inter-Tel  division 

WebDemo  Hosted 

*  Macromedia 

Breeze 

*  Nortel 

CallPilot 

Raindance  Communications 

Raindance  Meeting  Edition 

-  Santa  Cruz  Networks 

VidiTel 

»  Siemens  Communications 

HiPath  Xpressions 

■  Skype 

Skype  1.6  and  2.0 

■  Touchstone  Technologies 

WinEyeQ 

■  Viola  Networks 

NetAlly  RealTime  and  NetAlly  VoIP 

■  WebEx  Communications 

Meeting  Center 

■  WildPackets 

EtherPeek  VX 

■  ZyXel 

ZyXel  P-2000W  wireless  VoIP  phone 

INFORMATION  MANAGEMENT 

■  Akimbo 

Akimbo  Player 

■  Anthology  Solutions 

Yellow  Machine 

Buffalo  Technology 

TeraStation 

■  D-Link 

D-Link  DSM-320RD  Wireless  Media  Player 

■  Google 

Google  Mini 

■  Google 

Google  Search  Appliance 

■  Imation 

Imation  Disk  Stakka  CD  &  DVD  Manager 

Infrant  Technologies 

ReadyNAS  600 

■  Iomega 

StorCenter  Pro  NAS  200d,  with  REV  drive 

■  Maxtor 

Maxtor  Shared  Storage  Drive 

■  Microsoft 

Data  Protection  Manager  j 

■  Netgear 

Storage  Central  SC101  j 

■  SimpleTech 

SimpleShare 

■  Thunderstone  Software 

Thunderstone  Search  Appliance 

INFRASTRUCTURE,  NETWORK 

■  Array  Networks 

TMX5000 

■  Axentra 

Net-Box  H-70 

■  Cisco 

Catalyst  4948-10GE 

■  Citrix  Systems 

NetScaler  Application  Delivery  System  j 

■  Crescendo  Networks 

CN5080-E 

■  F5  Networks 

Big-IP  6800 

■  Foundry  Networks 

Serverlron  450  ; 

■  IBM 

IBM  x336  | 

■  Juniper  Networks 

DX  3600 

s  Nortel 

BayStack  5520 

■  Sun 

N2120V 

■  Sun 

SunFire  T2000 

IT  ASSETS 

■  American  Power  Conversion 

APC  Biometric  Mouse  Password  Manager  BioM34 

■  Apple 

Apple  Mac  mini 

■  Apple 

Apple  Cinema  Display 

■  Averatec 

Averatec  1000  series  notebook 

■  BenQ 

BenQ  DV3250 

■  Dell 

Dell  2405FPW  monitor 

■  Epson 

Epson  P-2000  multimedia  storage  viewer  ; 

■  Fujitsu 

Fujitsu  LifeBook  P1500  series 

■  Gateway 

Gateway  Cx200x  convertible  notebook 

■  HP 

HP  nx6125  Business  Notebook 

■  IBM 

ThinkPad  X41 

■  Lenovo 

Lenovo  ThinkCentre  S51 

■  Lenovo 

Lenovo  ThinkVision  L171p 

■  Motion  Computing 

Motion  LS800 

■  Philips 

Philips  200W6  20-inch  widescreen  LCD  monitor 

■  Philips 

Philips  Brilliance  190P6 
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b  Rocsecure  RocBit  2a  USB  2.0/Firewire  external  drive  ■  Caymas  Systems  Caymas  525 


*  Samsung 

Samsung  SyncMaster  930MP  display 

■  Check  Point 

Connectra 

e  Seagate  Technology 

Seagate  Pocket  Hard  Drive 

■  Check  Point 

VPN-1  Edge W 

w  SmartDisk. 

FireLite  100GB  USB  drive 

■  F5  Networks 

Fi  rePass  4100 

h  Sony 

Sony  VaioT350p 

■  Fortinet 

FortiGate  3600 

■  Sony 

Sony  Vaio  VCG-V620G 

■  Juniper  Networks 

ISG  2000  system 

*  Sony 

Sony  MFM-HT95  LCD  multifunction  display 

■  Juniper  Networks 

Secure  Access  SSL  VPN  Appliance 

s  Tangent 

Pendant  LCDPC-7500 

■  Lancope 

StealthWatch  M250  !| 

s  Toshiba 

Toshiba  Protege  R200-S234 

■  Nokia 

Secure  Access  System  500s 

m  Toshiba 

Toshiba  Qosmio  G25-AV513 

■  Nortel 

VPN  Gateway  3070 

m  Verbatim 

Store  'n'  Go  U3  Smart  Drive 

■  SonicWall 

Pro  1260  Enhanced 

a  Westinghouse 

Westinghouse  LVM-37wl  HD  monitor 

■  SonicWall 

SSL-VPN  2000 

■  Zio 

Zio  FoneMate  SD  &  SIM  Card  Data  &  Media  Manager 

SECURITY  MANAGEMENT 

MESSAGING 

■  Co-Logic  Security 

E-Secure-IT 

CenturionSoft 

CenturionMail  3.0 

Cybertrust 

Alert  Manager 

■  CipherTrust 

IronMail 

■  Desktop  Standard 

GPOVault  | 

EmergeCore  Networks 

IT-100  IT  in  a  Box  appliance 

■  Guidance  Software 

EnCase  Enterprise 

*  Entrust 

Entrust  Entelligence 

■  InfoExpress 

CyberGatekeeper 

■  PGP 

Universal  Series  500 

■  Microsoft 

Windows  Update  Service 

m  PostX 

SecureEmail 

■  NetlQ 

Group  Policy  Guardian,  Group  Policy  Administrator 

%  Symantec 

Mail  Security  8100 

s  PivX 

Threat  Focus  Diligence 

Tumbleweed  Communications 

MailGate  Secure  Messenger 

■  Quest  Software 

Group  Policy  Manager,  InTrust  for  Active  Directory 

■  ZipLip 

Secure  Messaging 

■  ScriptLogic 

Active  Administrator 

NFTWnRk  MANAGFMFNT 

■  Secunia 

Security  Manager 

■  ApplianSys 

DNSBox  300/100 

s  SecurityGlobal.net 

SecurityTracker 

a  BMC  Software 

BMC  Performance  Manager  Console,  Performance 

■  SecurityMob 

SecurityMob 

Manager  Portal,  Distribution  Server 

■  Symantec 

DeepSight  Alert  Services 

a  Coradiant 

TrueSight  1100 

Thor  Technologies  (now  Oracle) 

Xellerate  Identity  Manager 

a  HP 

OpenView  Network  Node  Manager,  OpenView 
Operations,  OpenView  Internet  Services 

WIRELESS 

International  Network  Services 

IPControl 

■  AirMagnet 

AirMagnet  Spectrum  Analyzer 

a  Lucent 

VitalQIP 

■  APC 

3-in-l  Wireless  Mobile  Router  \ 

Metainfo 

Meta  IP  Enterprise 

■  Aruba  Networks 

Aruba  A2400  and  A800  switches,  | 

and  A61  access  point 

a  Microsoft 

Microsoft  Operations  Manager  2005 

■  Bountiful  WiFi 

Bountiful  Router 

«  Microsoft 

Virtual  Server  2005 

■  Chantry  Networks  (now  Siemens) 

Chantry  BeaconMaster 

s  PerformancelT 

ProIT 

■  Cingular 

F9100  phone 

m  PremiTech 

Performance  Guard 

■  Cisco 

Wireless  LAN  Services  Module 

a  TechSmith 

Morae 

■  Colubris  Networks 

CN1250  *  j 

OPERATING  SYSTEMS 

■  HP 

iPAQ  HW6500  handheld 

a  Microsoft 

Internet  Explorer 

■  Interlink  Networks 

LucidLink 

a  Microsoft 

Vista 

■  Juniper  Networks 

NetScreen-5GT 

m  Microsoft 

Windows  2003  Server  x64 

■  Motorola 

i836  phone 

~  Mozilla  Foundation 

FireFox 

■  NetGear 

WallPlugged  Wireless  Range  Extender 

a  Novell 

Open  Enterprise  Server 

■  NetGear 

WGU624 

s  QCD  Microsystems 

InterStructures 

■  Network  Chemistry 

BlueScanner 

m  Red  Hat 

Red  Hat  Enterprise  Linux  4.0  Advanced  Server 

■  Palm 

PalmTX  handheld 

«  SCO  Group 

OpenServer  6 

■  Sony 

MFM-HT75W  multifunction  display  Jj 

*  Sun 

Solaris  10 

nww.com 

TEST  RESULTS 

■  Sprint  Nextel  and  RIM 

BlackBerry  7520  Wireless  Handheld 

SECURITY  INFRASTRUCTURE 

■  Verizon 

LG  VX8100  phone 

AEP  Networks 

Netilla  Security  Platform 

□  Go  online  for  a  link  to 
our  detailed  test  analysis 
on  each  of  these  products. 

DOCFINDER:  2359 

■  Wavelink 

Mobile  Manager  Enterprise 

Array  Networks 

Array  SPX-5000 

■  Xirrus 

XS-3900  1 

Aventail 

EX-1500 

Give  your  users  direct  access  to 
their  critical  enterprise  apps  when 
they  don't  have  access  to  their  office 


BlackBerry  delivers  more  than  just  email.  The  BlackBerry  Enterprise  Solution™  is  designed  to  provide  you  with  a 
platform  that  gives  your  users  wireless  access  to  existing  business  applications.*  It's  a  simple-to-use  solution  that's  easy  to 
manage.  With  millions  of  users,  BlackBerry  is  the  proven  solution  your  company  can  benefit  from. 


team  how  Blackberry  has  made  other  organizations 
more  competitive  at  hlackherry.com/go/platform 
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□An  OS  tester  fan 


bu  Iding  the  bes 


tasizes 
most 


stab  e  operating  system. 


By  TOM  HENDERSON 


y  worst  nightmare  would  be  to  wake  up  as  either  Linus  Torvalds, 
heavyweight  Linux  wrestler  of  the  world;  Ray  Ozzie,  holder  of  the 
future  of  Windows;  or  Jonathan  Schwartz,  alter  ego  of  Sun’s  Scott 
I  McNealy  All  are  the  lightning  rods  in  a  never-ceasing  thunderstorm  of  new 
technology  advances  in  hardware  and  mind-numbingly  sophisticated  soft¬ 
ware  applications.  To  live  in  their  respective  roles  requires  ego,  panache  and 
I  vision  —  and  Kevlar  armor. 


ISSUE 


Each  of  these  protagonists  had  one  of  his  products  tested  by  Network  World  last  year. 
If  we  were  to  take  the  successful  components  of  each  and  graft  together  our  own  per¬ 
fect  server  operating  system,  the  result  would  be  recognizable  —  but  barely 

First,  we’d  take  all  of  the  bloat  from  every  network  server  operating  system.  Every 
superfluous  driver  would  be  stripped, and  every  extraneous  piece  of  code  placed  onto 
a  spare  DVD  to  be  used  only  if  we  called  for  it.  Hardware  compatibility  at  installation 
time  mandates  having  all  drivers  ever  conceived  loaded  onto  the  server’s  storage 
media.This  is  like  bringing  in  the  5th  Army  division  when  a  single  sniper  is  needed. 

We’d  remove  all  but  the  core  command  sets.  All  obscure  executable  items  and  99% 
of  such  things  as  fonts,  sounds  and  stock  pictures  should  be  loaded  only  when 
requested.  Ask  for  the  media  or,  better  yet,  download  it  from  a  secure/authenticated 
Web  site  at  run-time,  when  needed.These  two  actions  —  deleting  drivers  and  culling 
obscure  executables  —  would  allow  most  operating  systems  to 
be  held  on  a  single  gigabyte  USB  flash  drive  fob.  No  flexibility 
would  be  denied.  Bloat  would  go  away. 

Moving  on  from  the  hardware,  we’d  give  our  operating  system 
the  rapid  porting  stability  of  Linux  2.6.  We’d  add  in  Sun’s  DTrace 
(a  tool  that  rapidly  determines  where  code  is  wasting  time  or  is 
in  an  error  condition),  which  helps  eliminate  the  finger-pointing 
when  code  doesn’t  execute  to  expectation. 

We’d  take  the  speed  of  Windows  64-bit  editions,  late  as  they 
were  to  the  64-bit  race,  or  Solaris  10’s  seemingly  unfettered 
responsiveness.  Both  are  comparatively  ugly,  however,  so  we’d  add  the  luxurious 
Apple’s  Panther/OS  X.4  GUI. 

All  the  best  cross-platform  virtualization  features  of  EMC’s  VMware  would  be  manda¬ 
tory.  But  we’d  add  in  the  ease  of  use  of  Microsoft’s  Virtual  Server  (www.nww.com, 
DocFinder  2322),  the  Redmond  giant’s  own  flavor  of  virtualization  software  that  lets 
you  run  multiple  instances  of  Windows  on  the  same  physical  server.  Because  we’d 


want  to  host  multiple  instances  of  whatever  we’d  like,  and  we’d  also  want  to  isolate 
them  as  need  be,  the  operating  system  would  require  the  highly  structured,  kernel 
security  model  of  Red  Hat’s  Advanced  Server  4.0. 

This  operating  system  would  have  to  understand  multicore  CPUs.They’re  the  future 
of  computing  as  higher  CPU  clock  speeds  become  more  difficult  for  CPU  vendors  to 
support.  Supporting  numerous  flavors  of  filing  systems  —  moving  beyond  the  chest 
thumping  that  one  is  better  than  another  —  also  would  be  a  must.  Give  us  our  choice 
of  WinFS,  or  Reiser  or  ZFS.  Cross-license  them  —  free  —  to  each  other  and  everyone 
so  we  no  longer  must  appease  proprietary  standards-less,  incompatible  applications. 

The  kicker  here  is  that  we’d  like  this  super  file  system  to  run  on  all  of  the  processor 
families  available.  No  special  editions  for  32-bit,  64-bit  or  multicore.  No  extra  surcharges 
for  the  Intel  Itanium,  AMD  64,  UltraSPARC  or  even  million  instruc¬ 
tions  persection.No  tiny  editions, medium  editions, standard  edi¬ 
tions,  enterprise  editions,  huge  fat  corporate  editions  or  galactic 
cluster  editions.  Just  one  set  of  code  for  developers  and  admin¬ 
istrators  and  network  engineers  and  civilian  users. 

In  turn,  there  must  be  no  second-class  clients.You  either  sup¬ 
port  them  in  a  festival  of  harmony  and  egalitarianism,  or  say, 
“We  don’t  support  them;  now  go  away”  No  half-attempts,  no 
client  ghettos  allowed. 

OK,  we  understand  that  we’re  totally  daydreaming  about  com¬ 
plete  compatibility  in  a  competitive  environment,  but  we  do  feel  it’s  something  to 
shoot  for.  Our  antecedents  drilled  into  us  what  compatibility  and  standards  mean; 
We  fail  when  they  become  an  oxymoron. 

Henderson,  a  Network  World  Lab  Alliance  member,  is  principal  researcher  and  man¬ 
aging  director  of  ExtremeLabs.  He  can  be  reached  at  thenderson@extremelabs.com. 


nww.com 

□SHARE  YOUR  OS  DREAMS 
Jump  into  an  online  forum, 
hosted  by  tester  Tom 
Henderson,  to  talk  about  the 
ideal  OS.doc  fin  per:  2353 


63 


JAMES  TURNER 


inter-Tel  Web  Conferencing: 
Changing  the  Face  of  Business 


For  virtually  every  business  that  finds  itself  in  a 
competitive  environment,  the  three  most  precious 
assets  are  time,  people  and  money.  Growing  a  busi¬ 
ness  while  preserving  these  resources  is  a  challenge 
that  many  managers  must  face. 

In  a  typical  day,  employees  can  be  scattered 
throughout  an  office  or  around  the  globe,  closing 
sales,  making  deals  with  suppliers,  searching  for 
potential  job  candidates  and  “putting  out  fires”  with 
customers.  Business  hours  have  no  limits  and  offices 
have  no  boundaries.  Deals  can  be  made  with  partic¬ 
ipants  in  any  location  —  an  airport,  a  hotel  room,  in 
the  car,  even  in  coffee  shops.  The  only  thing  that  is 
constant  in  todays  business  environment  is  that 
nothing  is  constant.  Fluidity  and  flexibility  define 
todays  successful  enterprise.  And  there  is  every 
indication  that  this  frenetic  pace  will  only  continue. 

To  keep  up  with  todays  constantly  evolving  work 
environment,  every  business  owner  needs  to  ask, 
“What  tools  do  I  need  to  remain  competitive?”  and 
most  importantly,  “How  can  I  succeed  without 
jeopardizing  my  most  precious  resources?”  Many 
companies  are  discovering  that  advanced  IP- 
powered  communications  tools  are  among  the  best 
ways  to  grow  their  businesses  and  better  utilize  their 
time,  team  members  and  financial  resources. 

“We  talk  with  a  large  number  of  businesses 
that  always  seem  to  have  people  on  the  go,” 
reports  Jeffrey  T.  Ford,  division  president  and  chief 
technology  officer  for  Inter-Tel,  a  leading  provider 
of  voice  and  data  communications  solutions  for 
businesses.  “And  when  we  tell  them  that  we  have 
products  that  will  enable  their  employees  to  become 
more  efficient  and  substantially  reduce  travel  and 
communications  expenses,  they  invariably  listen 
to  us.” 

With  the  emergence  of  Voice  over  Internet 
Protocol  (VoIP)  technology,  Inter-Tel  has  been  able 
to  successfully  develop  advanced  collaboration 
products  that  allow  companies  to  seamlessly  com¬ 
municate  with  colleagues,  customers  and  vendors  in 
the  next  building,  the  next  state  or  around  the  globe. 

One  product  in  particular,  Inter- Tel  Web 
Conferencing,  is  particularly  well-suited  for 


facilitating  real-time  Web  and  audio  conversations 
for  participants  in  geographically  disparate  locations. 

Recently  selected  as  a  “Best  of  the  Test”  finalist  by 
Network  World,  Inter-Tel  Web  Conferencing  is 
a  real-time,  web-based  software  solution  that 
provides  businesses  with  robust  conferencing  and 
collaboration  tools.  The  application  enables  users  to 
communicate  faster  and  more  effectively  with  team 
members,  customers  and  suppliers,  while  allowing 
businesses  to  significandy  increase  productivity  and 
reduce  travel,  cell  phone,  videoconference  and  other 
related  expenditures. 

Companies  typically  use  the  application  to 
schedule  and  administer  a  wide  range  of 
online  events,  including  training  sessions,  sales 
presentations  and  departmental  meetings.  Through 
its  Web  interface,  the  application  provides  a  number 
of  functions  for  collaborative  sessions,  such  as  Web 
conferencing,  document  sharing,  whiteboarding, 
polling  and  quizzing,  and  Internet  co-browsing. 
Inter-Tel  Web  Conferencing  is  a  reliable 
and  fully  secure  application,  incorporating 
multiple  layers  of  security  such  as  encryption  and 
password  protection. 

Participants  can  access  online  meetings  from 
desktop  telephones,  softphones  that  reside  on  laptop 
computers,  PDAs  and  a  number  of  other  mobile 
devices.  All  that’s  required  to  “attend”  a  meeting  is  a 


broadband  connection,  which  can  be  either  wired  or 
wireless.  This  ease  of  use  can  transform  virtually  any 
location  into  an  instant  conference  room.  As 
a  result,  business  communications  become  more 
intimate,  more  compelling  and  more  productive. 


Type 

Description 


I 

P  Public  r  Registration  P»oe 


Date  (mmWd/yyyrt 
Time 


Start  Time 
Duration 


f  All  Day  Meeting 

<*■  Timed  Meeting  (Enter  Below) 


1  v  00  *=!  C  AM  PM  24  Hr  Clock 
f  1  v  Hours  00  v  Minutes 
Allow  users  to  )oln  Any  Time  v  before  meeting  start 


In  addition,  Inter-Tel  Web  Conferencing  can  be 
easily  integrated  with  other  Inter-Tel  applications, 
such  as  its  presence  management  solution,  Unified 
Communicator®  v3.0,  providing  an  even  more 
productive  environment. 

“In  terms  of  providing  businesses  with  a  real-time 
ability  to  hold  online  Web  conferences,  deliver 
presentations  or  conduct  training,  there  is  no 
more  cost-effective  way  to  facilitate  these  activities 
than  through  collaborative  technologies,”  said  Ford. 
“Today’s  companies  are  successfully  leveraging 
tools  like  Inter-Tel  Web  Conferencing  to  improve 
their  most  fundamental  business  needs,  like 
generating  revenue,  improving  customer  service  and 
reducing  expenses.  It  is  an  outstanding  solution 
to  managing  time,  building  relationships  and 
maximizing  finances.” 


Inter-Tel,  Incorporated 

7300  West  Boston  Street  •  Chandler,  AZ  85226 
480-961-9000  •  www.inter-tel.com 


Advertising  Section 


Convoq  ASAP:  A  family  of 
Flash-based  online  meeting  systems 


Convoq’s  ASAP  products  are  the  only  Flash- 
based  online  meeting  systems  featuring  rich  media 
meeting  capabilities  that  include  desktop  sharing, 
PowerPoint  presentations,  text  chat,  VoIP  audio, 
video  and  now  Record  &  Playback. 

Convoq’s  ASAP  products  are  quite  simply  the 
best  for  simple,  affordable  online  meetings.  By 
giving  you  the  tools  for  instant  access,  audio  and 
video  conferencing,  presentation  sharing,  product 
demonstrations  and  record  &  playback  facilities, 
ASAP  provides  solutions  for  every  facet  of  your 
business:  sales,  marketing,  team  meetings,  training 
and  support.  And  because  ASAP  is  Flash-based,  all 
your  meeting  participants  will  enjoy  an  installation 
free  experience — saving  time  and  hassles  for 
everyone  concerned. 

In  addition,  Convoq’s  flexible  flat-fee  pricing 
model  allows  you  to  conduct  an  unlimited  num¬ 
ber  of  meetings,  with  each  meeting  able  to  hold 
up  to  15  participants.  Compared  to  web  confer¬ 
encing  products  from  larger  companies,  this  model 
will  save  you  many  hundreds  of  dollars  every  year. 
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Convoq  Product  Line 

Sell  ASAP  for  Salesforce  Users:  Online  Meetings  on  Demand 

•  Launch  online  meetings  in  one  click  from 
Salesforce 

•  Deliver  instant  presentations  and  rich- 
media  demonstrations 


— SB— 


•  Capture  meeting  event  data  in  Salesforce 
automatically 

•  Get  instant  help  from  other  members  of 
the  organization 

•  Improve  the  quality  and  quantity  of  sales 
data  tracked  and  reported 

•  MS  Outlook  integration — schedule  meetings 
and  send  invitations  through  Outlook 

ASAP  Pro:  Small  Business  Web  Conferencing 

•  Conduct  an  unlimited  number  of  meetings 

•  Deliver  the  message  with  audio/ 
video/PowerPoint 

•  Use  screen-sharing  to  demonstrate  products 

•  Publish  ASAP  links  in  e-mail/blogs/Web  sites 

•  Collaborate  online  with  up  to  15  people 
at  a  time 

ASAP  Conference  Room:  Web  Conferencing  for  Webinars,  Training 

and  Larger  Events 

•  Conduct  an  unlimited  number  of  meetings 
with  25,  50,  100  or  200  people 

•  Share  presentations,  applications,  documents 


www.convoq.com  or 
email  sales@convoq.com 


Convoq 
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What  to  know  before  you  buy 

□Consider  these  testers’  tips  before  making  your  next  network  purchase. 

By  JOANNE  CUMMINGS 


members  are  in  the  testing 
trenches  all  year.  Here  they 
turn  lessons  learned  into  tips  for  ensuring 
you  make  ultrasmart  buying  decisions. 


etwork  World  Lab  Alliance 


VoIP  infrastructure 

1.  Weigh  the  Session  Initiation  Protocol  (SIP) 
factor.  VoIP  gear  either  supports  the  standard  SIP 
or  uses  a  proprietary  format.  “SIP-standard  gear 
gives  you  lower  costs  and  good  prospects  for  mul¬ 
tivendor  interoperability’  says  Ed  Mier,  president 
of  testing  lab  Miercom.“But  it’s  still  ‘some  assem¬ 
bly  required’  in  many  cases  and  offers  fewer  fea¬ 
tures  because  the  standards  are  still  being  final¬ 
ized.  Proprietary  alternatives  give  you  singleven¬ 
dor  ownership  and  more  features,  but  higher 
costs  and  limited  multivendor  interoperability’ 

2.  The  more  trunking  support,  the  better.  Ask 
VoIP  equipment  vendors  what  carrier  services 
they  work  with  over  SIP  trunking,  then  “seriously 
consider  the  vendor  that  supports  the  most,”  Mier 
says.“You  will  save  big  time  over  the  next  year  in 
replacing  expensive  channelized  T-l  trunks.” 

3.  Check  bandwidth  controls.  “A  key  compo¬ 
nent  of  VoIP  quality  comes  from  your  ability  to 
control  VoIP  bandwidth  consumption,”  Mier  says. 
Look  for  gear  that  supports  automatic  G.729 
vocoding  over  WAN  links  and  provides  good  QoS 
and  detailed  call-admission  control. 


VoIP  management 

1.  Test  for  “moves,  adds  and  changes.”  Have  prospec¬ 
tive  vendors  walk  you  through  the  steps  to  add  a  new 
hard  phone  and  a  new  soft  phone  user,  including  setting 
up  voice  mairif  it  takes  more  than  5  minutes  and/or  five 
screens  of  data  entry  consider  another  vendor’ Mier  says. 

2.  Check  QoS  monitoring.  “Find  out  if  the  vendor’s 
management  pack  includes  any  options  or  supports 
third-party  packages  for  tracking  [QoS],”  Mier  says.That 
way,  you  can  investigate  complaints  of  poor  call  quality 

3.  Beware  SIP-based  management.  “There  are  many 
advantages  to  a  SIP-based  IP  PBX,”  Mier  says. “But  man¬ 
agement  likely  isn’t  one  of  them.”With  SIP’s  ability  to  mix 
and  match  multiple  vendors’ equipment  comes  multiple 
management  interfaces  —  one  for  call  control,  another 
for  phone  sets,  another  for  gateways  and  so  on.  “Know 
what  you’re  getting  into,”  he  cautions. 


Wireless  gear 

1.  Don’t  minimize  power  decisions  when  planning  for 
wireless  LANs,  especially  if  wireless  VoIP  is  involved,  says 
Tom  Henderson,  managing  director  of  ExtremeLabs. 
“Keep  wireless  VoIP  alive  by  choosing  access  points  that 
support  Fbwer  over  Ethernet,  and  connect  the  hubs  and 
switches  to  [a  UPS],”  he  says. “A  UPS/FoE  infrastructure 
can  usually  withstand  brownouts  and  other  conditions 
that  might  otherwise  cause  VoIP  outages.  It’s  also  more 
convenient  to  use  FbE  when  hanging  access  points  in 
false  ceilings  where  power  outlets  are  at  a  premium  or 
might  not  exist.  A  few  access  points  have  integral  batter¬ 
ies,  but  we  don’t  recommend  them.” 

2.  Don’t  skip  the  survey“A  Wi-Fi  plan  requires  examin¬ 
ing  the  airspace  with  a  Wi-Fi  analyzer  before  buying  and 
deploying  access  points  —  no  matter  how  clever  the 
access  point  or  how  powerful  its  signal  or  antennas  are 
purported  to  be,”  Henderson  says,  noting  that  strange 


Security  infrastructure 

1.  Don’t  under  buy  performance.  Testing  per¬ 
formance  in  security  products  is  becoming  in¬ 
creasingly  tough,  because  user  configurations  dif¬ 
fer  so  widely,  says  Joel  Snyder,  a  senior  partner 
with  Opus  One.“The  vendor  may  not  really  know 
how  fast  its  product  will  go  when  configured  the 
way  you  want  it,”  he  says.  If  you  can’t  test  the  prod¬ 
uct  in  your  network  before  you  buy  it,  then  care¬ 
fully  evaluate  performance  claims  so  you  don’t 
end  up  with  the  wrong  fit,  he  says.“Salesmen  tend 
to  size  products  to  fit  your  budget,  not  your 
requirements.  It’s  easy  to  underbuy  nowadays.” 

2.  Security  products  have  more  bells  and  whis¬ 
tles  than  most  organizations  use.  “Don’t  be  daz¬ 
zled  by  those  at  demo  time,”  Snyder  says.  “Each 
feature  has  a  cost,  probably  in  performance  and 
certainly  in  configuration  and  ongoing  manage¬ 
ment.  Understand  what  your  time  and  cost  com¬ 
mitments  are,  and  focus  on  the  features  you’re 
going  to  use,  not  the  ones  that  sound  cool.” 

3.  Focus  negotiations  on  support,  not  price.“Pciy 
list  price  for  the  hardware,  and  negotiate  the  long¬ 
term  support  costs,”  Snyder  says.“For  most  securi¬ 
ty  products,  direct  costs  for  support  and  vendor  sub¬ 
scriptions  will  exceed  capital  costs  within  three  years,  if 
not  sooner. That’s  where  you  should  focus  your  time.” 


Security  management 

1.  Process  trumps  features  in  identity  management. 
When  buying  identity  management  and  provisioning 
tools,  don’t  focus  solely  on  the  technology  aspects,  says 
Mandy  Andress,  president  of  ArcSec  Technologies.“More 
important  is  making  sure  your  processes  will  fit  with  the 
product  and  that  you  have  an  organization  that  will  read¬ 
ily  accept  process  changes.” 

2.  Audit  tools  need  to  be  team  players.  “Auditing 
always  brings  out  the  primordial  fear  in  IT  professionals,” 
Andress  says.  “Make  sure  your  auditing  tools  can  inte¬ 
grate  with  the  security  infrastructure,  complementing 
policy  development,  vulnerability  management,  compli¬ 
ance  and  risk  management.” 

Buy  continued  on  page  68 


things  can  block  signals,  and  co-channel  interfer¬ 
ence  can  rob  you  of  your  investment. 

3.  All  rogues  are  not  alike.  Check  whether  your 
vendor’s  rogue  containment  feature  can  distin¬ 
guish  between  different  types  of  rogues,  says 
David  Newman,  president  of  consultancy  Net¬ 
work  Test.  “If  you’re  Starbucks,  you  want  to  kick 
unauthorized  users  off  your  network  —  but  not 
off  the  McDonald’s  network  next  door” 
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Breakthrough  Technology: 

Maximum  System  Performance  -Automatically 


INTRODUCING  NEW 

■ 


The  Number  One  Automatic  Defragmenter 


It’s  a  known  fact  fragmentation  cuts  directly  across  the  integrity  of  your 
systems  causing  crashes,  slowdowns,  freeze-ups  and  even  total 
system  failures. 

NEW  Diskeeper  10  provides  new  adaptive  technology  designed  to  wring 
every  last  drop  of  performance  out  of  every  computer  on  your  network. 

No  more  complaints  from  users  waiting  50  seconds  opening  a  Word 
document,  45  seconds  saving  a  file  or  70  seconds  searching  for  one.* 
With  Diskeeper’s  advanced  automatic  “Set  It  and  Forget  It”®  technology, 
peak  performance  is  maintained  -  automatically! 

Diskeeper  10  “Set  It  and  Forget  It”  Features 

•  NEW!  I-FAAST™  (Intelligent  File  Access  Acceleration  Sequencing 
Technology),  breakthrough  disk  performance  calibration  technology 
that  boosts  access  speeds  for  the  most  commonly  accessed  files. 

•  NEW!  Terabyte  Volume  Engine™  defrags  large  volumes,  SANs, 
RAIDs  and  NAS,  quickly  and  thoroughly. 


•  NEW!  Core  enhancements  provide  faster,  more  thorough 
defragmentation 

•  NEW!  Enhanced  I/O  Smart™  intelligently  provides  transparent 
defragmentation  ensuring  uninterrupted  system  operation. 

•  EXCLUSIVE!  “Set  It  and  Forget  It”  scheduling  includes 
SmartScheduling™  for  fully  customized  and  automatic 
defragmentation  based  on  individual  usage  patterns. 

•  NEW!  Enhanced  user  interface  provides  easy  configuration  and 
scheduling  as  well  as  reports  on  disk  health,  real  time  performance 
and  fragmentation  statistics. 

•  NEW!  Native  64  bit  operating  systems  support. 

Every  system  on  your  network  needs  Diskeeper,  The  Number  One 

Automatic  Defragmenter  with  over  17  million  licenses  sold! 

Volume  licensing  and  Government  /  Education  discounts  are  available 

from  your  favorite  reseller  or  call  800-829-6468  code  4342 


SPECIAL  OFFER 

TRY  NEW  DISKEEPER  FREE  FOR  4.§  DAYS! 

Download:  w w w. diskeeper. cojri/riW  1 0 

•  •*  *  7  y/'  * 1 

(Note:  Special  45  day  trial  only  available  at  above Tink) 


‘Windows®  IT  Pro,  The  Impact  of  Disk  Fragmentation  white  paper 


'A  corporation 


©2005  Diskeeper  Corporation.  All  Rights  Reserved.  Diskeeper,  The  Number  One  Automatic  Defragmenter.  I-FAAST,  I/O  Smart,  SmartScheduling.  Terabte  Volume  Engine.  "Set  It  and  Forget  It",  and 
the  Diskeeper  Corporation  logo  are  registered  trademarks  or  trademarks  owned  by  Diskeeper  Corporation  in  the  United  States  and/or  other  countries.  Windows  is  a  registered  trademark  or 
trademark  owned  by  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  Diskeeper  Corporation  •  7590  N  Glenoaks  Blvd.  Burbank,  CA  91 504  •  800-829-6468  •  www.diskeeper.com 
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Beware  of  feature  creep  in  endpoint 
security.  Like  many  security  wares,  today’s 
endpoint-security  products  have  a  glut  of 
features,  Andress  says.  “Stay  focused  on  the 
problem  you  are  addressing  and  don’t  get 
carried  away  making  a  decision  based  on 
features  you  will  never  use.” 

E-maii  security 

1 ,  Make  the  certificate-management 
decision  upfront.  “Before  you  shop,  figure 
out  how  and  where  you  want  to  manage 
your  certificates,” says  Travis  Berkley  associ¬ 
ate  director  for  networking  and  telecom¬ 
munications  services  at  the  University  of 
Kansas. “Managing  at  the  gateway  vs.  man¬ 
aging  at  the  desktop  can  really  change  the 
look  of  an  encryption  system.  There  is  no 
right  or  wrong  answer,  as  long  as  you  plan 
your  implementation  upfront.  Trying  to 
shoehorn  a  package  to  handle  certificates 
differently  from  how  it  was  designed  usual¬ 
ly  doesn’t  work  out  very  well.” 

2,  Know  the  desktop  pitfalls.  If  you  man¬ 
age  certificates  at  the  desktop,  one  consid¬ 
eration  is  key  escrow, Berkley  says.“Will  your 
system  administrator  be  able  to  recover  the 


certificates  if  the  employee  managing  the 
certificates  quits  or  gets  hit  by  a  bus?”  he 
asks.“And,are  you  subject  to  a  bevy  of  other 
regulations?  If  you  allow  encryption  at  the 
desktop,  you  have  to  be  prepared  for  ensur¬ 
ing  capture  of  those  messages.” 

3.  Know  the  gateway  trade-offs. 
Management  at  the  gateway  has  its  own  pit- 
falls,  Berkley  says.“If  you  allow  only  encryp¬ 
tion  at  the  gateway  are  you  going  to  use  one 
single  certificate  for  the  entire  company,  or 
will  you  create  —  and  therefore  manage  — 
unique  certificates  for  each  employee?” 
These  decisions  need  to  be  made  before 
buying  e-mail  encryption,  he  says. 

Net  management  systems 

1.  Do  a  crash  test.The  best  network  man¬ 
agement  systems  are  easy  to  recover,  says 
Barry  Nance,  president  of  Network  Testing 
Labs.  “Before  you  buy  make  sure  you  can 
reinstall  the  [network  management  sys¬ 
tem]  tool  when  its  server  crashes  on  a 
Friday  at  1 1  p.m.  —  especially  if  the  ven¬ 
dor’s  licensing  ties  the  tool  to  a  network 
adapter’s  [media  access  control]  address 
and  the  vendor  doesn’t  offer  24/7  quick- 


response  support,”  he  says. 

2.  Buy  with  everyday  use  in  mind.  “Don’t 
think  you’ll  use  the  [network  management 
system]  tool  just  when  problems  occur? 
Nance  says.Tlan  to  use  the  tool  consistently 
and  continuously,  and  leverage  it  for  capaci¬ 
ty  planning  as  well  as  problem  diagnosis.” 

3.  Make  applications  a  priority“Buy  a  tool 
that  offers  some  recognition  of  —  and  per¬ 
haps  integration  with  —  the  applications 
on  the  network,”  Nance  says.  “High-level, 
app-level  views  of  the  network  increase 
your  business  intelligence  considerably’ 

Storage  gear 

1.  “Never  buy  storage  without  a  plan  to 
back  the  media  up  on  a  regular  basis,” 
ExtremeLabs’  Henderson  says.  “Part  of  the 
hidden  costs  of  storage  is  the  licenses  and 
devices  needed  to  provide  backups.  Plus, 
conformance  legislation  may  require  you 
to  keep  data  alive  or  available  for  far  longer 
than  has  been  required  in  the  past.  Before 
you  buy  make  sure  you  can  migrate  these 
items  into  subsequent  systems  or  onto 
media  whose  life  meets  the  requirements.” 

2.  Consider  buying  high  revolutions-per- 


minute  drives.  Drives  that  spin  at  a  high 
number  of  rpm,  such  as  10K-  or  15K-rpm 
drives,  really  do  perform  faster  when  used 
in  RAID  1  or  5  arrays,”  Henderson  says. 
“Although  7,500-rpm  drives  (especially 
those  with  lots  of  onboard  cache)  can  be 
good  performers,  high  rpm  drives  can 
mean  the  difference  between  fast  and  real¬ 
ly  fast;  the  speed  is  definitely  discernible.” 

3.  Stick  with  standards.“Anything  inside  a 
storage  enclosure  should  be  easily  replace¬ 
able,”  says  James  Gaskin,  an  independent 
researcher.  “Odd-shaped  power  supplies  or 
funky  disk  carriers  that  can’t  be  replaced 
can  cause  you  grief  you  don’t  need.” 

Infrastructure 

1.  Do  a  support  test.  Before  renewing  the 
24/7  service  contract  on  a  server  or  net¬ 
work  switch,  do  the  Sunday  9  a.m.  test, 
Network  Test’s  Newman  says.“Have  a  green¬ 
sounding  employee  call  the  vendor’s  sup¬ 
port  line  during  off-hours  with  a  tough 
question  that  you  already  know  the  answer 
to.  The  speed  and  quality  of  the  response 
will  tell  you  something  about  the  level  of 
service  you  can  expect.” 


IT  supports  and  controls  the 
applications  that  run  the  business. 

Now  there's  an  application  to  support 
and  control  the  business  of  IT. 

Maximo’1  ITSM,  the  most  comprehensive  IT  asset  and  service 
management  solution,  substantially  improves  the  business  of  IT, 
significantly  increasing  the  value  IT  brings  to  an  organization.  By 
unifying  IT  service,  asset  and  work  management  on  a  single 
software  platform,  Maximo  ITSM  delivers  the  control  and  visibility 
you  need  to  align  IT  service  levels  with  your  overall  business  goals. 
All  you  need  to  integrate  and  automate  processes,  reduce  unplanned 
outages,  standardize  and  share  information  and  surpass  service-level 
commitments.  To  make  your  IT  organization  more  efficient  and 
more  valuable,  download  our  whitepaper  at  www.maximoit.com/nw 
or  call  800-326-5765. 

COUNTED  CONTROLLED  MAXIMIZED 

mro  software 


vt5e  *  A>fiw it u\  I ik.  All  righto  reserved.  Maximo  is  a  registered 
U  .•citnu«r*  and  MRO  Software  Is  a  trademark  of  MRO  Software.  Inc. 
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Mandy  Andress 


□  President,  ArcSec 
Technologies  >  tests  security 

MANAGEMENT  HARDWARE  AND  SOFTWARE 


HJohn  Bass 

□Technical  director,  Centennial 
Networking  Labs  at  North 
Carolina  State  University  >  tests  server 

AND  NETWORK  HARDWARE 


Who’s 


in  the  Network 
World  Lab  Alliance 


2.  “When  negotiating  prices, 
especially  on  large-volume  pur¬ 
chases,  remember  that  the  capi¬ 
tal  cost  is  often  just  a  small  por¬ 
tion  of  the  total  cost  of  owner¬ 
ship,”  Newman  says.  “Other  pric¬ 
ing  factors  include  staff  retrain¬ 
ing,  people  costs  to  run  the 
equipment,  spares,  service  and 


support,  and  power  and  space 
requirements.” 

3.  Make  security  a  key  criteri¬ 
on.  “When  evaluating  any  new 
piece  of  networking  equipment, 
find  out  whether  it  supports 
strong  authentication  and 
encryption  by  default  for  man¬ 
agement  traffic  —  and  for  user 


traffic,  if  applicable,”  Newman 
says.“Security  needs  to  be  part  of 
the  review  process  for  every 
component  in  the  network 
today!’ 

Cummings  Qocummings@com- 
cast.net)  is  freelance  writer  in 
North  Andover,  Mass. 


H  Travis  Berkley 

□  Associate  director  for  net¬ 
working  and  telecommunications 
services,  the  University  of  Kansas  >  tests 

MESSAGING  AND  WIRELESS/MOBILE  PRODUCTS 

Jeffrey  Fritz 

□  Director  of  enterprise  net¬ 
work  services,  the  University 
of  California,  San  Francisco  >  tests 

NETWORK  MANAGEMENT  TOOLS  AND  NETWORK  GEAR 


B  James  Gaskin 

□  Independent  researcher  > 

TESTS  OPERATING  SYSTEMS,  STORAGE 
AND  SMALL/MIDSIZE  BUSINESS  PRODUCTS 


Tom  Henderson 

□Principal  researcher  and 
HHI  managing  director,  ExtremeLabs 

>  TESTS  WIRELESS  GEAR,  STORAGE  SOFTWARE  AND 
OPERATING  SYSTEMS 


* 


Ed  Mier 

□  President,  Miercom 

>  TESTS  VOIP  HARDWARE  AND  SOFT¬ 
WARE  AND  STORAGE  PRODUCTS 


Barry  Nance 

□  President,  Network  Testing 
Labs  >  TESTS  WAN/LAN,  MOBILE 
DEVICE  AND  APPLICATION  MANAGEMENT  PRODUCTS 


David  Newman 

□  President,  Network  Test  > 

TESTS  SECURITY  AND  NETWORK  INFRA¬ 
STRUCTURE  PRODUCTS 


B  Christine  Perey 

□  President,  Perey  Research 
and  Consulting  >  tests  multime¬ 
dia  APPLICATIONS  AND  SERVICES 


Thomas  Powell 

□  CEO,  PINT  >  TESTS  WEB 
MANAGEMENT  products 


Joel  Snyder 

□  Senior  partner,  Opus  One 

>  TESTS  SECURTTY  PRODUCTS 


Sam  Stover 

□  independent  consultant 

>  TESTS  SECURITY  HARDWARE  AND 


SOFTWARE 


■  Rodney  Thayer 

□  independent  network 
security  consultant 

>  TESTS  SECURITY  HARDWARE  AND  SOFTWARE 


When  It  Comes  to  True  Innovation, 
There  IYs  Only  One  Fish  in  the  Pond 


Introducing  the  Bcldcn  IBDV  System  10GX. 
Clearly  the  most  innovative  UTP  structured 
cabling  solution  in  the  marketplace. 

Sometimes  you  have  to  take  a  big  leap  in  your  thinking  to  get  to 
something  that's  truly  new  —  and  truly  great.  That’s  what  we've 
done  with  our  10GX  Solution, 

Our  10GX  Solution  isn’t  an  improved  or  boosted  Category  6  system, 
but  a  revolutionary  new  system  designed  around  a  series  of 
dynamic  enabling  technologies  that  deliver  on  the  two  most 
critical  factors  in  10  Gigabit  service:  reduction  of  Alien  Crosstalk 
and  controlled  performance  up  to  a  minimum  ot  500  MHz. 

To  accomplish  Beyond  10G™  performance,  we’ve  developed  four 
totally  new  enabling  technologies  —  technologies  that  allow 
the  Beiden  IBDN  System  10GX  to  deliver  guaranteed  performance 
up  to  625  MHz. 


DuPont  "  certified  limited 
combustible  cable 


•  SpiralFleX™  Cable  technology  that  increases  randomization  and 
greatly  improves  Alien  Crosstalk  performance 

•  Matrix  IDC™  Module  technology  which  eliminates  the  issue  of 
Alien  Crosstalk  between  modules,  offering  performance  30  times 
better  than  Cat  6 

•  FleXPoint  PCB  Module  technology  that  positions  the  compensation 
circuitry  directly  at  the  plug’s  point  of  contact,  offering  unbeatable 
mated-connection  performance 

•  X-Bar™  Module  termination  technology  that  assures  accurate 
module/cable  termination  and  reduces  installation  differences 

. 

10GX  is  truly  the  most  advanced  10G  system  in  the  marketplace  — 

in  fact,  every  other  system  is  just  treading  water. 


For  more  information,  please  call 
Beiden  CDT  Networking 
at  1-800-262-9334. 

www.BeldenlBDN.com 


©2005,  Beiden  CDT  Inc. 
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and  beyond 


□  Selected  by  Network 
World  columnists,  these 
ive  products  offer  novel  ways  to  solve 
today’s  enterprise  challenges. 


the  category-BREAKER 

□  Symantec’s  Backup  Exec  lOd  for  Windows  Servers 


SELECTED  BY:  Johna  Till  Johnson,  president  of  Nemertes 
Research,  "Eye  on  the  Carriers”  columnist 


security  vendor  is  uniquely  posi¬ 
tioned  to  combine  information  pro¬ 
tection  with  ILM  and  business  contin¬ 
uance.  Although  Symantec  has  not  yet 
integrated  its  leading  anti-malware 
technology  into  its  backup  software, 
doing  so  is  an  obvious  next  step. 

Who’s  using  it?  Leading-edge 
advocates  of  information  stewardship 
in  general,  and  CDP  in  particular, 
include  professional-services  firms,  par¬ 
ticularly  those  managing  a  great  deal  of  customer  data. 
Companies  subject  to  compliance  constraints  also  tend 
to  lead  in  information  stewardship  initiatives,  since  com¬ 
pliance  concerns  make  logging  and  auditing  capabili¬ 
ties,  and  the  ability  to  search  and  retrieve  older  file 
copies,  more  critical.  These  kinds  of  companies  are  on 
the  forefront  when  it  comes  to  understanding  the  need 
for  information  stewardship  overall,  and  in  particular  in 


What  makes  this  product  so 
Special?  Although  Backup  Exec  lOd 
joins  a  crowded  field,  it  represents  a  milestone  for  two 
key  reasons.  First, as  an  offering  provided  by  a  major  ven¬ 
dor,  it  highlights  the  mainstream  emergence  of  continu¬ 
ous  data  protection  (CDP)  as  a  key  trend  in  business 
continuance.  With  CDR  business-continuity  planning  is 
becoming  less  about  periodic  batch  backups  of  cen¬ 
trally  stored  data,  and  more  about  ongoing  manage¬ 
ment  and  availability  of  information  across  the  enter¬ 
prise  in  real  time. 

Second,  Symantec’s  move  highlights  another  signifi¬ 
cant  trend  toward  enterprisewide  information  steward¬ 
ship,  a  holistic  approach  to  information  protection  and 
security  data-quality  management,  information  life-cycle 
management  (ILM),  business  continuance  and  compli¬ 
ance.  In  a  recent  Nemertes  benchmark,  87%  of  partici¬ 
pants  said  they  consider  effective  information  steward¬ 
ship  vital  —  and  a  backup/ILM  product  offered  by  a 


grasping  the  significance  of 
integrated  solutions  that  com¬ 
bine  functions  such  as  infor¬ 
mation  protection  with  back¬ 
up  and  ILM.  A  case  in  point  is 
New  York-based  Berdon  LLRan 
accounting  firm  that  uses 
|  Backup  Exec  and  finds  partic¬ 
ular  value  in  Symantec/Veritas’ 
ability  to  provide  integrated 
solutions  for  managing  data. 

How  much  will  it  cost,  on  average? 

Symantec  Backup  Exec  lOd  and  the  Backup  Exec 
Continuous  Protection  Server  are  priced  from  $795 
per  server.  The  Backup  Exec  Continuous  Protection 
Server  is  included  at  no  additional  cost  with  Backup 
Exec  lOd.A  Continuous  Protection  Starter  Kit,  includ¬ 
ing  Backup  Exec  lOd,  Backup  Exec  Continuous 
Protection  Server  and  three  Continuous  Protection 
Agents,  starts  at  $995. 


«  Elemental 


Va-rtc'*-:  .  rale  -hecki  ocftcy  settirgj  01  hosts  iinrtnj 
.  htngjYttwn  Th»po6cyc<rt*n*fU*s 

-v.'S-iy  po*CY  rocommcnasb-toi  rathe 

'ic  etoR  «rar-nr. 


THE  category-BREAKER 

□  Elemental  Security’s  Elemental  Compliance  System  1.1 

SELECTED  BY:  Dave  Kearns,  independent  consultant,  "Identity  Management” 
and  "Windows  Networking  Strategies”  newsletter  author 

What  makes  this  product  SO  special?  Combining  policy-based  management,  intrusion 
detection  and  response,  regulatory  compliance  monitoring  and  traditional  firewall  duties,  Elemental 
Security’s  Elemental  Compliance  System  1.1  not  only  is  a  category  breaker  but  also  a  mold  breaker.The  system  rede¬ 
fines  the  overlapping  areas  of  security  identity  compliance  and  response.  I  call  it  a  firedoor,but  even  that  term  seems 
inadequate  for  all  that  this  product  does. 

Who’S  Using  it?  Among  the  enterprises  that  have  implemented  the  Elemental  Compliance  System  are  Catholic 
Health  System,  John  Wiley  &  Sons,  Marshall  BankFirst  and  Purdue  University. 

HOW  much  will  it  cost,  on  average?  Elemental  Security  licenses  the  product  by  server  and  agents  (that  is, 
connectors  to  managed  services  and  devices).The  list  price  for  one  server  and  500  agents  is  $100,000;  bulk  pricing  is 
available,  and  most  installations  will  vary. 

Breaker  continued  on  page  72 


Five  new  reasons  why 
APC  is  preferred  3  to  X  for 
data  center  protection 


InfraStruXure™  Express 

APC's  InfraStruXure™  Express  is 
a  fully  mobile,  fully  integrated, 
ready  to  use  data  center  perfect 
for  disaster  recovery,  temporary 
usage,  or  events  support.  To  learn 
more  about  this  innovative  solution 
for  data  centers  on  the  go,  visit 
http://promo.apc.com  and  enter 
the  keycode  highlighted  in  the  box 
below. 


Blade  Ready  Assessment 

Don't  move  to  blades  without  an 
APC  Blade  Readiness  Assessment. 
Examining  everything  from  hot 
spots  to  airflow,  this  evaluation 
will  give  you  added  security  as 
you  move  your  data  center  to 
blades.  For  more  information,  or 
to  see  a  sample  of  our  work,  visit 
http://promo.apc.com  and  enter 
the  keycode  highlighted  in  the  box 
below. 


Wish  you  knew  "who  did  what  when" 
the  last  time  your  servers  went  down? 
Newly  acquired  NetBotz®  provides 
fully  manageable  environmental 
monitoring  and  video  surveillance, 
including  emailing  your  video 
clips  of  intrusions  or  out-of-bounds 
events!  Pre-empt  trouble  and  prevent 
downtime. ..take  a  demo  today  at 
http://promo.apc.com  and  enter 
the  keycode  highlighted  in  the  box 
below. 


Fuel  Cell  Technology 

Need  extra  runtime  that  you  can  rely 
on?  Constrained  by  local  generator 
restrictions?  Check  out  our  new,  Fuel 
Cell  based  extended  runtime  option, 
fully  integrated  into  the  InfraStruXu¬ 
re™  architecture,  and  featuring  the 
additional  runtime  you  need  for 
peace  of  mind!  See  it  at  http://pro- 
mo.apc.com  and  enter  the  keycode 
highlighted  in  the  box  below. 


NCPI  Science  Center 

With  more  than  80  "must-read" 
white  papers  published  on  data 
center  issues  and  technologies, 
our  NCPI  Science  Center  is  actively 
investigating  the  problems  of  today 
and  tomorrow.  With  lab-testing 
and  field  research  to  back  up  over 
200  years  of  combined  experi¬ 
ence,  there's  no  data  center  issue 
this  tenacious  team  can't  handle. 
Download  samples  of  their  latest 
work  at  http://promo.apc.com  and 
enter  the  keycode  highlighted  in 
the  box  below. 


If  Legendary  Reliability0  isn't  reason  enough. . . 


How  have  we  gone  from  making  simple  UPS  systems  to 
being  the  world  leader  in  Network  Critical  Physical 
Infrastructure  (NCPI)  solutions?  By  cultivating 
a  fanatical  focus  on  eliminating  downtime 
wherever,  whenever,  and  however  it  occurs. 

Almost  7,000  APC  employees  and  over 
30,000  global  solution  providers  have 
this  focus:  to  deliver  the  benefits  of 
standardization  and  to  eliminate  the 
waste  of  legacy  designs.  This  veritable 
army  of  availability  experts  is  at  your 
disposal,  with  the  sole  mission  of  helping 
to  increase  profits  and  peace  of  mind  wherever 
your  data  is  created,  transmitted,  or  stored. 


You  can  count  our  patents. 

You  can  count  the  $1 00  million  we  will  invest 
in  R&D  in  the  next  12  months,  providing 
solutions  for  the  problems  of  today  and 
anticipating  those  of  tomorrow. 

You  can  count  our  satisfied  customers. 
Most  importantly,  you  can  count  on 
us.  After  all,  that's  what  Legendary 
Reliability  is  all  about... 


There  are  hundreds  of  reasons  the  Fortune  1000  is  saving  (and  making) 
millions  with  our  standardized  InfraStruXure™  architecture,  and  at  the  rate 
we  are  innovating  there  will  be  hundreds  more  a  year  from  now. 

See  our  latest  launches  at  www.apc.com 


Get  a  FREE  White  Paper 
"Avoiding  Costs  from  Oversizing  Data 
Center  and  Network  Room  Infrastructure" 
and  a  FREE  InfraStruXure™  brochure. 

Visit  http://promo.apc.com  and 
enter  key  code  i733x  or  call 
1  -888-289-APCC  x3602  today. 


BLADE 

READY' 


APC  is  committed  to  innovative  and 
cost-effective  solutions  to  your  power, 
cooling  and  management  needs.  With 
the  industry's  newest  patent-pending 
approach  to  these  problems,  you  can 
count  on  APC  and  our  partners  to  ensure 
integrity  in  your  blade  application. 


Legendary  Reliability® 


©2006  American  Power  Conversion  Corporation.  All  trademarks  are  the  property  of  their  owners.  *CMP  Benchmark  study  2005  •  E-mail:  esupport@apcc.com  •  132  Fairgrounds  Road.  West  Kingston,  Rl  02892  USA  •  APC4A5EF-US 
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Breaker  continued  from  page  70 

Til  CATEGORY-BREAKER 

U3’s  U3  smart-drive  technology 


Launchpad 


Rem 


SELECTED  BY:  Jim  Kobielus,  senior  technical 
systems  analyst  at  trading  exchange  Exostar, 

"Above  the  Cloud”  columnist 

What  makes  this  product  so  special? 

U3  smart-drive  technology, the  latest  step  in  client  virtualization, is  a 
boon  to  anyone  who  needs  to  keep  a  personal  productivity  work¬ 
space  constant  across  diverse  PCs.  The  technology  allows  the 
instant  transformation  of  any  Windows  (XP  or  2000)  PC  into  a  vir¬ 
tual  client  machine.  The  U3  smart  drive  hosts  a  personal  workspace  on  a  standard  USB 
flash  drive,  which  stores  a  user’s  applications,  files,  utilities  and  personalization  prefer¬ 
ences.  For  example,  a  user  can  configure  his  U3  smart  drive  with  combinations  of  free 
U3  smart  software  from  Mozilla,Trillian  and  Skype,as  well  as  trial  and  paid  versions  of 
dozens  of  other  applications.The  user  simply  plugs  the  U3  smart  drive  into  a  host  PC’s 
USB  port,  and  the  U3  Launchpad  interface  appears,  accessible  from  an  icon  in  the 
Windows  system  tray  Just  as  important,  the  user  can  remove  all  traces  of  the  applica¬ 
tions,  data  and  settings  from  the  host  PC  by  unplugging  the  U3  smart  drive.The  drive  is 
well  suited  to  many  mobility  kiosk  and  guest-computing  scenarios.  It  also  is  the  right 


U3  Welcome! 

Q  Avast!  Antivirus 

CricerSync  U3  Edition 

Sfgm^Sbield  Passwords 

^Skype 

^Ad, 

Mcsltta  Firef ox  U3 

_ 

tool  when  users  need  to  deploy 
non-standard  personal  productivi¬ 
ty  solutions  to  work  on  desktops  with¬ 
out  violating  desktop  configuration  guidelines. 

Who’S  using  it?  U3  has  positioned  this  technology  for  broad 
adoption  by  business  and  consumer  users.lt  has  lined  up  a  host  of 
flash-drive  manufacturers,  such  as  Kingston  Technology  Memorex, 
M-Systems,  SanDisk  and  Verbatim.  Several  of  these  vendors  have 
shipped  retail  versions  of  the  technology  bundled  with  various 
applications.  In  addition,  U3  has  recruited  a  broad  range  of  commercial  and  open 
source  software  developers  to  build  versions  of  their  applications  and  utilities  for  the 
technology  The  U3  software  development  kit  has  been  downloaded  more  than  3,000 
times  since  the  September  2005  launch. 

HOW  much  will  it  cost,  on  average?  Hardware  manufacturers  and  private- 
label  vendors  generally  offer  retail  pricing  for  U3  smart  drives. Typically  pricing  is  per 
drive  and  depends  primarily  on  a  drive’s  capacity  For  example,  a  256MB  smart  drive 
costs  between  $30  and  $40  per  unit,  whereas  a  1GB  drive  costs  around  $70  and  a  2GB 
drive  is  more  than  $150. 


the  CATEGORY-BREAKER 


□  Belkin’s  Pre-N  wireless  LAN  family 


SELECTED  BY:  Ira  Brodsky,  president  of  Datacomm  Research, 

"Totally  Unplugged”  columnist 

What  makes  this  product  SO  special?  The  Belkin  Pre-N  wireless  LAN 
family  offers  unprecedented  transmission  range.  The  distance  covered  by  a 
WLAN  can  be  crucial  in  settings  such  as  small  offices  and  retail  stores.  Extra  reach  avoids  the  has¬ 
sle  and  expense  associated  with  installing  repeaters  or  multiple  access  points  attached  to  a  cable 
backbone.These  products  are  not  only  compatible  with  the  802.11b  and  802. llg  standards;  they 
boost  the  range  achievable  with  those  standards  by  about  20%. 

Who’s  using  it?  The  IT  department  of  Synnex.a  global  IT  supply  chain  services  company 
in  Fremont,  Calif.,  uses  the  Pre-N  family  For  example,  it  has  an  application  for  which  it  has 
replaced  three  802.1  lg  wireless  routers  with  one  pre-N  router. 

HOW  much  will  it  cost,  on  average?  The  Belkin  wireless  routers  are  priced  at  around  $125 
each. The  desktop  and  laptop  cards  cost  from  $70  to  $100.  Note  that  the  desktop  card  is  actually  a  notebook 
card  plugged  into  a  desktop  PCI  slot  adapter. 


nww.com 

GET  THE  BIGGER  PICTURE 

□  Our  contributors 
provide  more  detailed 
explanations  of  what 
makes  these  five  products 
so  noteworthy. 

DOCFINDER:  2358 


THE  CATEGORY-BREAKER 

□  Apple’s  MacTel 

SELECTED  BY:  Winn  Schwartau,  president  of  Interpac,  "On  Security”  columnist 

What  makes  this  product  so  special?  In  April  2005,  Apple  introduced  OS 
X  10.4,  aka  Tiger.  In  January  it  announced  MacTel  computing.  And  now  imagine 

desktop  and  laptop  computers  that  don’t  crash  for  months  at  a  time.  Imagine  PCs  that  are  pretty  darn  close  to  immune 
to  the  endless  train  wrecks  caused  by  viruses  and  worms.  Imagine  increasing  the  performance  of  a  very  secure  computing  environment 
by  as  much  as  400%  overnight.  Imagine  an  engineering  company  that  builds  and  delivers  properly  integrated  hardware,  properly  con¬ 
figured  security  default  conditions  —  almost  plug  and  play  Imagine  a  computing  environment  in  which  the  endpoint  is  not  a  viable  tar¬ 
get  for  the  bad  guys.  Lastly,  imagine  that  the  total  cost  of  ownership  for  these  benefits  is  lower  than  what  you  are  currently  paying. 

Who’S  using  it?  No  major  enterprise  is  going  to  convert  100,000  seats  to  MacTel.  But  I  am  seeing  large  organizations  deploying  Mac 
networks  across  specific  departments,  and  more  than  just  graphics.  Entire  sales  and  marketing  departments  within  some  financial  firms 
are  actively  migrating  to  Mac  and  MacTel.Gene  Fredriksen, C1SO  for  St. Petersburg, Fla.-based  Raymond  James  Financial, says  he  is  deploy¬ 
ing  additional  Macs,  where  appropriate,  within  portions  of  the  enterprise  to  reduce  the  total  cost  of  ownership  of  user  computing. 

HOW  much  will  it  cost,  on  average?  MacTel  is  priced  from  about  $1,300.  Enterprise  volume  purchase  agreements  are 
available. 
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ye  YESTERDAY’S  MESSAGING, 
TOMORROW’S  DEMANDS 


BUSINESS-CRITICAL  COLLABORATION  TAKES  ON  WEAK-KNEED  PRODUCTIVITY! 


FEATURING  SPECIAL  GUEST: 

THE  NEW  LOTUS  NOTES  &  DOMINO  7  ★  BEYOND  E-MAIL,  BEYOND  CALENDARING,  BEYOND  'IT’LL  BO” 
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FOR  BUSINESS-CRITICAL  COLLABORATION 


KNOCK-OUT  APPLICATION 
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can’t-work-without 
products,  in  readers’  own  words. 


1.  PRIMAVERA  SYSTEMS’  PRIMAVERA 

he  biggest  problem  1  hear  about  with  delivering  projects 
on  time  is  that  CIOs  didn’t  plan  enough  resources  or 
devote  enough  man-hours.  If  estimates  are  wrong,  then 
there  are  all  types  of  problems  —  the  target  date  will  be  late, 
and  that  will  have  a  knock-off  effect  on  all  your  other  projects. 
A  mistake  that  leads  to  this  is  starting  off  project  budgets  with  a  blank 
page.  You’ll  have  greater  precision  if  you  use  the  history  of  a  similar 
project  as  a  starting  point. 

We  use  Primavera  Systems’  [Primavera]  project-management  tool  to  record 
and  forecast  the  necessary  manpower  and  resources  needed  for  each  proj¬ 
ect,  and  that  helps  us  deliver  more  than  95%  of  tasks  on  time. 

We  use  it  to  archive  details  about  all  our  technology  projects  —  past  and 
present. We  log  everything  about  networking  and  development  for  the  almost 
200  deployments  we  do  each  month.  Using  Primavera’s  tool  lets  us  plan  with 
precision  and  keep  our  resources  aligned  with  business  needs. 

As  we  go  through  a  project  everyone  enters  the  hours  they  spent  and  what 
skills  were  required.  It’s  important  that  people  record  this  information  with 
discipline  and  the  appropriate  level  of  detail. 

When  forecasting  a  project,  we  can  look  at  the  history  of  similar  projects 
to  get  an  idea  of  what  will  be  needed.  For  instance,  we  did  a  migration  of  a 
portion  of  one  of  our  products  from  a  Windows-based  architecture  to  Java. 
We  were  able  to  dramatically  increase  the  accuracy  of  our  projection  by 
going  back  and  compar- 

Primavera  Systems’  tool  tracks  multiple  projects. 


ing  two  or  three  similar 
projects  and  benchmark¬ 
ing  against  them.  It 
allows  us  to  complete 
multithousand  man¬ 
hour  projects  on 
schedule  with  relative¬ 
ly  few  surprises. 

History  can  be  an  amaz¬ 
ingly  good  road  map,  and 
we’ve  learned  that  those 
who  do  not  learn  from  his¬ 
tory  are  bound  to  repeat  it. 

Faves  continued  on  page  76 
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Ron  Rose  _ 

Title:  CIO,  Priceline,  Norwalk,  Conn.  Years  in  networking:  30 

"Primavera  Systems’  [Primavera] 
project  management  tool ... 

helps  us  deliver  more  than 
95%  of  tasks  on  time.” 
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Steve  Perry 

•  Title:  IT  director,  Costello  &  Sons 
Insurance,  in  San  Rafael,  Calif. 

•  Years  in  networking:  22 
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Remedy  Help  Desk  monitors  and  displays 
the  status  of  all  trouble  tickets. 

ticket  on  his  own  and  track  it.  If  there’s  a  critical  issue 
that  hasn’t  been  addressed  for  15  minutes,  our  team 
will  automatically  be  notified. 

IT  also  uses  it  to  make  sure  we’re  not  stepping  on 
each  other’s  toes.  We  can  see  if  people  are  working 
on  similar  projects.  Before,  we  would  never  have  an 
idea  where  we  were  in  projects  and  what  everyone 
was  spending  time  on.  it  helps  us  track  that  informa¬ 
tion  more  effectively 

We  want  to  find  trends  in  trouble  tickets  and  not  be 
like  the  movie  “Groundhog  Dayf  doing  the  same 
thing  over  and  over  again.  For  instance,  a  user 
might  call  in  to  the  service  desk  because  he  is  hav¬ 
ing  trouble  with  a  password.  If  the  [technicians] 
aren’t  communicating,  then  they’ll  just  reset  the 
password  and  move  on.  However,  if  you  see  [via  the 
application]  that  10  or  15  people  are  having  prob¬ 
lems  with  their  passwords  in  a  matter  of  minutes, 
then  you  know  there  is  a  bigger  problem,  and  you 
can  quickly  address  it.  While  the  tool  won’t  fix  the 
problem,  it  allows  us  to  manage  the  process  that 
leads  to  fixing  the  problem. 


2.  BMC  SOFTWARE’S  REMEDY  HELP  DESK 

our  Linux  environment,  there  aren’t  a  lot  of  off-the-shelf  products  we  can  use.  However, 
the  Remedy  Help  Desk  application  is  great  at  helping  us  identify  and  track  issues  appro¬ 
priately.  It  also  lets  us  communicate  out  to  users,  and  it’s  going  to  be  extremely  impor¬ 
tant  as  we  move  forward. 

We  purchased  the  tool  about  a  year  ago. The  intent  was  to  better  monitor  and  manage  issues  across  IT  —  not  only  from 
end  users  but  ones  we  find  internally  The  goal  is  now  to  use  the  product  to  help  us  adopt  a  stronger  change-management 
philosophy 

Remedy  holds  us  more  accountable, because  customers  have  access  to  this  tool  as  well.  A  customer  can  open  a  trouble 
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3.  MIMOSA  SYSTEMS’  MIMOSA  NEARPOINT  SERVER 

e’re  a  paperless  office, so  we  depend  heavily  on  our  e-mail  system 
in  all  three  of  our  [California]  locations  —  San  Rafael,  Irvine  and 
Santa  Barbara.  All  of  the  transactions  that  take  place  over  e-mail 
need  to  have  some  kind  of  digital  backup.  We  have  a  large  Microsoft  Exchange 

environment,  and  there  are  a  lot  of  messages  with  important  attachments. 

Mimosa  NearPoint  Server  does  three  things  for  us:  It  backs  up  Exchange  in  real  time; 
it  provides  continuous  data  protection  for  our  e-mail  system;  and  it  provides  a  failover 
for  the  Exchange  server.  If  you’ve  ever  worked  with  Exchange,  you  know  these  are  all 
critical  features. 
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Mimosa’s  tool  protects  e-mail  data. 


Before,  if  someone  made  a  mistake  on  Exchange,  we  used  to  have  to  restore  it  from  tape,  and  that  would  take  a  day  and  a  half  just 
to  get  the  e-mail  system  back  on  its  feet.The  company  would  come  to  a  grinding  halt.  Microsoft  never  invented  a  way  to  have  a  warm 
backup  for  Exchange.  Now,  if  my  Exchange  server  crashes,  I  can  go  to  the  NearPoint  Server  and  click  “restore.”  Thirty  minutes  later, 
I  have  my  system  back  up  and  running.  At  most  we  might  have  lost  an  hour  of  productivity  from  the  time  of  the  last  snapshot  to  com¬ 
plete  restoration.  I’ve  done  a  lot  of  Exchange  recoveries  in  my  time,  and  you’re  lucky  if  you  lose  less  than  a  day  typically 
1  can  also  configure  the  NearPoint  Server  to  extract  attachments  from  Exchange  and  deliver  them  from  the  NearPoint  Server. That 
way,  I  don’t  have  to  have  everyone’s  kids’  pictures  and  other  attachments  clogging  up  the  Exchange  server. When  a  user  sends  an  attach¬ 
ment  to  everyone  in  the  company,  it  simply  inserts  a  pointer  to  a  file  on  the  NearPoint  Server.  This  makes  Exchange  much  more 
efficient  and  boosts  performance,  because  the  database  shrinks  considerably  in  size  —  in  fact,  ours  has  been  reduced  by  two-thirds. 
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4.  NORTEL'S  ENTERPRISE  POLICY  MANAGER 

e  have  14  classrooms  in  our  business  school  equipped  with  live 
data  jacks.  Since  the  students  usually  have  laptops  in  class,  the  fac¬ 
ulty  has  a  hard  time  capturing  their  attention.  Even  though  the 


laptop  is  an  incredible  tool  for  learning,  it’s  also  a  distraction.  Faculty  wanted  a  way 
to  control  or  shut  down  what  students  do  on  their  laptops. 

To  achieve  this,  we  use  Nortel’s  Enterprise  Policy  Manager  (EPM)  with  a  custom  piece  of 
code  I  wrote  to  manage  the  networks  in  the  classrooms  from  the  instructor  station. 

If  I’m  teaching  a  class, for  instance,!  can  use  the  instructor’s  workstation  in  the  room  to 
choose  what  traffic  1  want  to  block  and  those  packets  are  filtered  from  the  edge  switch¬ 
es  within  5  seconds.  The  beauty  is  that  each  instructor  can  use  the  workstations  differ¬ 
ently  Instructors  giving  exams  online  over  the  student  laptops  during  class  can  make  sure 
their  students  have  access  only  to  the  Web  server  that  holds  the  university’s  testing  tool. 

Using  the  workstation,  which  is  policy-driven,  they  can  guarantee  that  students  can’t  go 
to  the  Web  or  chat  or  do  e-mail  during  the  exam. The  only  packets  allowed  are  those  to 
and  from  the  testing  server. 

Another  benefit  is  that  by  using  a  product  like  this  . . .  we  can  prevent  viruses  and  hacking  out  on  the  edge. 
Traditional  firewall  architecture  forces  you  to  send  everything  through  a  central  point.  For  us,  when  we  have 
an  outbreak,  we  want  to  stop  it  at  the  user  port  so  that  we  don’t  bring  down  the  core  of  the  network.  We  can 
see  what  filters  are  getting  hit  and  even  if  a  particular  user  is  getting  hit. Traditionally  it  would  have  taken  us 
days  to  push  virus  updates  and  policies  out  to  the  edge,  but  EPM  lets  us  do  it  in  15  to  20  minutes.  Everything 
is  managed  from  a  single  server,  and  there  are  a  great  number  of  switches  it  can  handle  remotely  The  IT  staff 
is  able  to  write  policies,  as  well  as  offer  teacher-level,  in-room  access. 


Michael  Vertefeuille 


Title:  IT  director,  University  of  Connecticut 
School  of  Business,  in  Storrs,  Conn. 
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IVR  and  VoIP  applications. 
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5.  SPI  DYNAMICS’ WEBINSPECT 

o  do  a  lot  of  development  in-house  and  externally  on  our  intranet 
and  extranet  sites. We  have  a  global  network  of  sites  that  spans  to 
all  countries.  I  want  to  make  sure  that  these  portals  are  secure. 

It  took  me  a  while  to  find  Weblnspect.The  problem  with  most  vulnerability  tools  is  the 
false  positives.  Weblnspect  found  a  lot  of  interesting  items,  but  not  a  lot  of  false  positives. 

Some  tools  tell  you  there’s  a  problem  but  don’t  tell  you  how  to  solve  it.  If  you 
want  to  be  hated  in  a  development  environment,  point  out  to  people  that  they 
have  a  problem  but  you  don’t  know  how  to  fix  it.  Weblnspect  points  out  the 


SPI  Dynamics’  tool  finds  holes,  suggests  fixes. 


code  and  gives  references  on  how 
to  fix  that  code.  Any  developer  can 
take  my  report  and  learn  how  to  fix 
what’s  wrong.  Everyone  I’ve  given  a 
Weblnspect  report  to  has  been 
impressed,  because  it  was  a  learn¬ 
ing  experience  for  them. 

We  have  two  people  in  IT  using 
Weblnspect  extensively  to  test  sites 
across  the  company.  We  also  tell  the 
in-house  developers  we  use 
Weblnspect  so  they  can  test  their 
sites  against  it.  Some  departments 
in  the  company  like  to  work  with 
[application  service  providers]  for 
their  sites.  Our  concern  is  that  it’s 
our  intellectual  property  and  personal  information.  We  want  to  know  how  the 
ASP  will  handle  that  data.  Before  we  sign  up  with  an  ASR  we  run  the  Weblnspect 
tool  against  them.  We  also  do  periodic  checks  using  the  tool.  We  can  tell 
whether  the  ASP  is  secure  or  not.  I  have  walked  away  from  companies  after  see¬ 
ing  the  results  from  Weblnspect.  I  show  them  the  vulnerabilities  they  have,  and 
if  they  don’t  want  to  fix  them,  then  we  won’t  do  business  with  them. 

Gittlen  is  a  freelance  technology  editor  in  Northboro,  Mass.  She  can  be  e-mailed  at  sgit 
tlen@charter.net. 


"It  took  me  a 
while  to  find 
Weblnspect.The 
problem  with 
most  vulnerability 
tools  is  the  false 
positives.” 


Paul  Samadani 

•  Title:  Director  of  corporate  technology  services, 
Pentair,  in  Golden  Valiey,  Minn. 

•  Years  in  networking:  23 
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MorganFranklin  Corp 
NEC  Display  Solutions 
NetClear  (Berk-Tek/ 

Ortronics  Solutions) 

NetQos 

Nex  Computers 

NIH/NITAAC 

NItgen 

Noren  Products  Inc 
Nova  Solutions,  Inc 
NSI  Software,  Inc 
Nuance  Communications,  Inc 
OASIS 

OCE  North  America 
Olive  Software 

Omnitron  Systems  Technology,  Inc 
One  Mile  Up,  Inc 
Open  Systems  Inc 


“I  always  look  forward  to 
being  able  to  ask  experts 
questions  to  hardware 
and  software  problems  that 
have  plagued  my  office  for 
the  previous  year.  I  also 
greatly  enjoy  learning  about 
the  latest  improvements  and 
innovations  in  software  as 
well  as  technology.  ” 

-  2005  Attendee 


Open  Systems  Solutions,  Inc 
Orator  Plus,  LLC 
Origin  Lab 

Ottawa  Centre  for  Research 
&  Innovation  , 

Overland  Storage 
PageStamp 

Palm,  inc 

Panasonic  Computer  Solutions  Co 
Panda  Software  U.S. 

Panduit 

Par3  Communications 
PC  Mall  Gov,  Inc 
PC  Recycler 
Pearl  Software 
Pearson  Technology  Group 
Permuta  Technologies 
Perseus  Development  Corp 
Phicom 

Physical  Optics 
Plantronics 
Plateau  Systems 
Platespin 
Plextor 

Point  Software 
Polycom 
PowerDsine 
Processor 

Progressive  Technology 
Federal  Sys.,  Inc 
Psion  Teklogix 
PureDepth 
Quality  Associates 
Quantum  Corporation 
R.  J.  Enterprises 
Raritan  Computer,  Inc 
RE  SRC  Limited 
Recovery  Point  Systems 
Red  River  Computer  Company 
RedDot  Solutions 
Reliasource 
Rented 

Research  In  Motion  Ltd 

Reverse  911 
Ridgeline  Technology 
Rimage  Corporation 
ROI  Automation 
Rose  Electronics 
RT&B 
SABA 

Safety  Management  Systems,  Inc 
Savi 

SAWIS  Federal  Systems 
SC-ID  Logic 


ScienceLogic 
SEH  Technology 
Seoul  Standard 
Sepaton 

Server  Technology  Inc 
SHAREVIS 
Sigma  Solutions 
SK  Mobile  Energy 
SMART  Technologies,  Inc 
Smooth  Solutions 
Snake  Tray 

Softchoice  Corporation 
Softmart 

Software  Productivity  Strategists 
Software  Security  Solutions 
Sony  Electronics 
Sophos,  Inc 
Southern  Business 
Communications 
SPEC 

Spectracom 
Spectrum  Control,  Inc 
SPL  Integrated  Solutions 
Spot  Coolers 
StarNet  Communications 
Stellent 

Storage  Networking 
Industry  Assoc 
Stratix 

Strayer  University 
Strix  Systems 

Sumitomo  Electric  Lightwave 

Sunflower  Systems 

Sungard  Availability  Services 

Superior  Modular  Products 

SuprTEK 

Susteen 

Symbol 

Sys-TecGTSI 

System  Engineering  International 
Taleo  Corporation 
Target  Distributing 
TAWPI  (The  Assoc  for  Work 
Process  Imp) 


fjgg 


Tripie  Bridge  Inc 
Tripp  Lite 
Tripwire,  Inc 
TS  Microtech 
T-Symetry 
Tux.org 

Twenty  First  Century 
Communications 
Tyan  Computers 
Tyco  Electronics 
Ubtos 

UKTI  -  British  Embassy 
UltraBac  Software 
UNICOR 
Univenture 
University  Alliance 
University  Learning  Institute 
University  of  Maryland 
University  College 
USAMobility 
Valt-x  Technologies,  Inc 
Verbatim  Corporation 
Verizon  Wireless 
Vi  Systems  LLC 
Vigilar 

ViON  Corporation 
Visioneer 
VMware,  Inc 
Voicecom 

Walker  &  Associates 
Web  Services  Interoperability 
Westwood  Computer  Corp 
WFED/Federal  News  Radio.com 


“Magazines  and  the  Internet 
are  fine,  but  FOSE  offers  the 
opportunity  to  touch  and  feel 
the  technology  and  talk  to 
those  who  sell  it  and  also 
those  who  use  it.  In  fact, 
some  of  my  colleagues... 
made  purchases  of  technology 
products  seen  at  the  exhibits.  ” 
-  CIO,  Arlington  County, 
Virginia 


Technology  Training  & 

Wiebe  Tech  LLC 

Services  Corporation 

Wilson  Elecronics 

TeleBright  Corporation 

Winning  Partners  - 

Telesis 

Proposal  Solutions 

Telkonet 

WMAL 

Tellabs 

WMMJ-FM 

Texas  Memory  Sys. 

WolfVision 

Texthelp  Systems  Ltd 

.  WcrkRite  Ergonomics 

The  Culver  Group 

Wright  Line 

The  Lansburgh 

Wyse  Technology 

ThoughtLink,  Inc 

Xceedium 

Thunderstone  Software 

Xerox 

TIG 

wave 

Time  Warner  Cable 

Xythos  Software 

TctalMedia  Inc 

vsng-Ming  Int’l.  Corp 

Tote  Vision 

Yuatech 

Transition  Network  Inc 

l  sbra  Technologies 

Trans-Lux  Corporation 

ZyLAB  North  America,  LLC 

TransPerfec!  Translations 

Trimble 

Exhibitors  as  of  1/27/06 

Register  today  at  www.FOSE.com 

Use  Priority  Code:  S6NWW 

FOSE  is  FREE  for  military  and  government  professionals  and  $50  for  non-government,  and  only  open  to  trade  professionals.  No  one  under  i3  is  admitted,  regardless  of  affiliation  or  circumstance. 
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MILAN  MULTI-LAYER  GIGABIT  ETHERNET  SWITCHES 


SIMPLY 


MILAN’S  MIL-SM80I  series  of 
layer  2  managed  switches 
provides  high 

performance  non-blocking 
switching. 


88® 


The  ShAir  AccessG  Pro 
AP/Bridge:  MILAN’S  new 
cost-effective,  enterprise-class 
wireless  access  point. 
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The  MIL-SM240I M  Series  is 
MILAN’S  most  powerful,  flexible 
line  of  Layer  2  management 
switches. 


MILAN  makes  switching  and  wireless  technology  accessible  to 
even  more  applications,  more  needs,  and  more  importantly,  more 
people. Transition  Networks,  the  industry  leader  in  product 
quality,  availability  and  support,  now  offers  MILAN  switching  and 
wireless  products  as  a  way  for  small  businesses  to  simply 
connect  the  devices  they  need. 


CONNECT  THE  DEVICES  YOU  NEED 
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MILAN  BY 

TRANSITION 

NETWORKS* 


MILAN  brings  more  within  your  reach,  with  less  of  what  you 

don’t  need. 


www.milan.com  800-526-9267 
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Best  blogs  for  buyer 


□  The  best  vendor  blogs  contain 
hidden  corporate  and  product  gems. 

By  SUSAN  SCHAIBLY 

years  to  come,  this  decade  might  well  be  known  as  the  Age  of  the  Blog.  About 
fm  B  11  ■  80,000  blogs  are  created  every  day,  according  to  Umbria  Communications, 
wp  I  L  I  la  new-media  monitor.  Technorati,  the  popular  blog-tracking  site,  keeps  tabs  on 
■■HH24.9  million  sites  and  1.9  billion  links.  The  blogosphere  is  a  crowded,  noisy 
place,  and  IT  blogs  are  everywhere.  All  of  which  means  that  finding  the  best  blogs  to  track  your 
top  vendors  can  be  more  miss  than  hit.  Yet  blogs  can  be  worthwhile  sources  of  little-known 
company  or  product  information.  We  looked  through  hundreds  of  blogs  about  the  companies 
featured  here,  many  written  by  anonymous  bloggers  who  claim  to  have  inside  connections. 
The  following  are  a  sample  of  the  best  blogs  offering  inside  skinny. 


MICROSOFT 

SCOBLEIZER.A  MICROSOFT  GEEK  BLOGGER 
□  http://scobleizer.wordpress.com/ 

Robert  Scoble  is  a  Microsoft  technical  evangelist.  His 
blog  is  a  combination  of  RSS  championing,  links  to  news 
sources  and  commentary  on  Microsoft’s  public  tri¬ 
umphs  and  miscues.  Scoble  predictably  touts  Microsoft 
products,  but  he  also  admits  a  grudging  appreciation  for 
competitors.  (One  post  lamented  his  12-year-old  son’s 
effort  to  save  enough  money  for  a  new  MacBook.) 

When  other  blogs,  such  as  Engadget  and  Techdirt,  post¬ 
ed  rumors  that  Microsoft  was  blocking  MP3  playback  on 
Verizon  phones,  Scoble  straightened  out  the  situation 
within  hours. With  about  2,500  sites  linking  to  his  blog,  a 
statement  from  Scoble  gets  around  the  ’Net  quickly 
Scoble’s  credibility  is  enhanced  by  his  “I’m  not  hiding 
anything”  attitude.  He  posts  his  cell  phone  number,  and 
he  encourages  candid  comments  from  readers.  One 
reader  had  this  to  say  about  Scoble’s  MacBook  post, 
“Does  anybody  else  see  the  irony  in  the  son  of  the  most 
well-known  Microsoft  evangelist  being  so  pro-Apple?” 
Scoble’s  spin?  “My  son  wants  the  expensive  MacBook 
[because]  it’ll  run  both  Windows  and  OSX.  Enough  said. 
. . .  He’s  an  iPbd  fan,  which  got  him  sold  on  Apple  stuff.” 

Mini-Microsoft 

□  http://minimsft.blogspot.com/ 

This  blog,  published  by  an  anonymous  Microsoft 
employee,  pulls  no  punches  when  it  comes  to  criticizing 
the  software  behemoth. The  tagline  says  it  all:“Let’s  slim 
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□BLOGGER  MATCH-UP 

Test  how  well  you  know  your  vendor  blog¬ 
gers  by  matching  up  blog  excerpts  to  their 
sources.  DOCFINDER:  2354 


down  Microsoft  into  a  lean,  mean,  effi¬ 
cient  customer  pleasing  profit  making 
machine!”  Mini  has  called  Microsoft 
“bloated,  big  and  slow”  and  has  actively 
discouraged  job  seekers  from  looking 
for  work  (or  accepting  work)  at 
Microsoft,  though  the  blogger  does  think 
interns  can  learn  a  lot  from  a  good  dose 
of  Microsoft  culture  and  then  taking 
their  talents  elsewhere.  Yet  the  blogger  writes,  “I  love 
Microsoft ...  and  I  know  we  have  the  innate  potential  to 
be  great  again  and  to  backtrack  away  from  this  path  of 
mediocrity’  The  rant-meter  often  goes  off  the  charts  at 
Mini-Microsoft,  but  the  fly  on  the  wall  point  of  view  is 
irresistibly  addictive. (For  links  to  official,  Microsoft-spon¬ 
sored  employee  blogs,  visit  http://blogs.msdn.com/.) 

IBM 

ED  BRILL:COLLABORATION, TRAVEL, TECHNOLOGY 
AND  MORE  □  www.edbrill.com/ebrill/edbrill.nsf 

Ed  Brill,  a  senior  marketing  manager  for  Lotus  soft¬ 
ware,  is  candid  and  likable.  He  praises  the  company 
but  also  acknowledges  when  IBM  gets  it  wrong.  In  a 
Jan.  5  post,  he  admitted  that  his  knee-jerk  defense  of 
IBM  (and  its  slack  domain-name  management)  result¬ 
ed  from  drinking  “a  little  too  much  IBM  Kool-Aid,”and 
he  went  on  to  write  that  “Microsoft  seems  to  be  very 
good  about  this.” 

The  blog  displays  Brill’s  wry  and  biting  sense  of 
humor.  One  of  the  most  viewed  posts  is  a  PowerPoint 
presentation  provocatively  titled  “The  Boss  Loves 
Microsoft:  Where  Does  that  Leave  Lotus?”  Another  good- 
natured  jab  was  a  post  that  featured  a  picture  of 
Microsoft  Chief  Software  Architect  Bill  Gates  carrying  a 
precariously  balanced  sheaf  of  papers.  “Where’s  his 
Tablet  PC?” Brill  mused.  (Fora  guide  to  IBM  blogs, check 


out  “The  Hitchhiking  Blogger’s  Guide  to  IBM  Blogs”  at 
www.rhs.com/web/ibm/hhbg2ib.nsf/web/index.html.) 

ORACLE 

THE  TOM  KYTE  BLOG  □  www.tkyte.blogspot.com 

Tom  Kyte  has  been  using  Oracle  products  since  1988, 
has  worked  for  Oracle  since  1993  and  has  written  sever¬ 
al  books  on  the  company  Kyte,  who  is  vice  president  of 
the  Core  Technologies  Group,  owns  asktom.oracle.com, 
a  blog  overflowing  with  Oracle  technical  knowledge  (a 
Jan.  5  post  consisted  solely  of  a  9i/10g  version  of 
fncRefCursor2HTML). 

The  mix  of  highly  technical  posts  and  personal  obser¬ 
vations  (a  screen  shot  of  an  empty  e-mail  in-box)  gives 
readers  a  daily-life  perspective.  Kyte  often  reports  about 
the  technical  support  problems  he  solves  as  part  of  his 
job,  which  makes  this  blog  an  excellent  resource  for 
Oracle  customers.  Recently,  Kyte  polled  readers  on  their 
preferences  for  new  tech  help  forums  and  engaged  in  a 
lively  debate  in  the  comment  section  about  the  value  of 
such  sites  (www.nwwcom,DocFinder2333). 

(Kyte  features  an  extensive  blogroll  of  Oracle  blogs, 
written  by  insiders  and  outsiders.You  also  can  find  links 
to  blogs  about  Oracle  at  www.orablogs.com.) 

Schaibty  ( sschaibly@aol.com )  is  a  freelance  writer 
in  Fort  Collins,  Colo. 


JAMES  TURNER 
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Controlling  telecom  costs 


BY  AMY  SCHURR 

According  to  a  new  report  from 
the  Aberdeen  Group,  poorly  man¬ 
aged  telecom  expenses  cost  the 
typical  large  company  more  than 


$8  million  per  year  in  overcharges 
and  missed  rebate  and  savings 
opportunities.That's  an  astound¬ 
ing  amount  of  money  being  left 
on  the  table. 


“Telecom  is  a  large  and  growing 
expense  at  most  companies,”  says 
Rick  Saia,  an  Aberdeen  analyst 
and  author  of  the  report.“With  the 
constantly  changing  market  for 


many  telecom  services,  such  as 
the  growth  of  wireless  devices 
and  VoIP  enterprises  need  to  get 
this  spending  under  control.” 

“The  Telecom  Cost  Management 


N-TRON  gives 
you  more  ways 
to  monitor  your 
industrial 
Ethernet 
network 


Introducing  N-TRON’s  9000  Series  GbE 
Industrial  Switch  with  Advanced  Monitoring 
to  bridge  the  gap  between  IT  and  the  Factory 

N-TRON®  manufactures  a  unique  product  that 
bridges  the  domain  between  IT  and  the  Factory 
as  far  as  network  monitoring  software  needs  are 
concerned.  Our  9000  Series  provides  plug-and- 
play  SNMP  and  Web  Browser  monitoring  for  IT, 
and  fully  compliant  OPC/HMI  monitoring  for  the 
Factory,  all  in  a  ruggedized  steel  enclosure  that  is 
capable  of  withstanding  rigorous  environmental 
conditions. 


•  Hardened  Environmental  Specifications 

•  Extended  Temperature,  Shock, 
Vibration,  and  High  Noise  Protection 

•  High  MTBF  >1M  Hours 

•  Redundant  Power  Inputs 

•  High  Availability 

•  Plug-and-Play  Advanced  Monitoring 

•  Full  SNMP  and  Web  Browsing  for  IT 

•  Full  OPC  Compliance  for  the  Factory 

•  Four  Slot  Mix  and  Match  Modular  Switch 

•  Six  Port  10/1  OOBaseTX  Modules 

•  Two  or  Four  Port  100BaseFX  Modules 

•  Two  Optional  Gigabit  Fiber  Ports 

•  Standard  Managed  Switch  Features 

•  IGMP,  Link  Aggregation,  Port  Control, 
Port  Mirroring,  IEEE  802.1  D, 

802.1  p  QoS,  802.3,  802.3u,  802.3x, 

802. 1w  RSTP,  802.1  Q  VLAN,  SNMP, 
and  Web  Browsing 

N-iron,3 

THE  INDUSTRIAL  NETWORK  COMPANY  C^SE> 
Visit  us  on  the  web  @  www.n-tron.com  or  call  (251)  342-2164 


Process  Benchmark  Report”  finds 
that  large  companies  with  formal 
telecom  cost  management  pro¬ 
grams  have  more  than  four  times 
as  many  invoices  under  proactive 
management  than  those  without 
formal  programs.  And  organiza¬ 
tions  that  have  a  program  to  con¬ 
trol  telecom  spending  take  30% 
less  time  to  source  a  contract. 

Some  businesses  may  make 
telecom  spending  the  domain  of 
finance  or  operations  groups, 
though  in  many  companies,  IT 
has  a  hand  in  it.  How  good  is  your 
department  at  squeezing  the  most 
from  telecom  spending? 

If  there’s  room  for  improvement, 
consider  the  following  measures: 

•  Manage  your  service  con¬ 
tracts:  As  detailed  in  a  recent 
Management  Strategies  story 
(www.nww.com,  DocFinder:  2362) 
on  making  the  most  of  your  IT 
budget,  Habitat  for  Humanity 
saved  $100,000  in  the  last  year  by 
improving  contract  manage¬ 
ment,  particularly  for  phone  ser¬ 
vices.  Habitat’s  CIO  double 
checks  the  phone  bills  for  accu¬ 
racy  and  looks  for  ways  to  cut 
costs  by  collapsing  lines  and 
renegotiating  rates. 

•  Look  to  VoIP:  Another  money¬ 
saving  tip  from  that  story  is  to  roll 
out  VoIP  to  capture  savings.  The 
Smithsonian  Institute  replaced  a 
hodge  podge  of  phone  systems 
with  IP  PBXs  and  phones.  By 
migrating,  the  organization  has  re¬ 
duced  the  annual  cost  of  its  voice 
services  by  $2.3  million  per  year, 
reports  CIO  Dennis  Shaw.  And  the 
savings  are  expected  to  rise  to 
more  than  $3  million  once  the 
systems  are  folly  rolled  out. 

•  Let  vendors  fight  for  extra  busi¬ 
ness:  Telecom  procurement  and 
contract  negotiations  firm  Tel- 
wares  advises  clients  to  set  overall 
contract  commitment  at  65%  or 
less  of  telecom  expenses.This  pro¬ 
vides  flexibility  and  motivates  car¬ 
riers  to  maintain  its  value  to  your 
business  in  the  hopes  of  winning 
more  of  your  traffic.  ■ 
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It’s  impossible  to  regulate  'Net  neutrality 


BY  STEVE  TAYLOR 
AND  LARRY  HETTICK 

We  support  the  concept  of  In¬ 
ternet  neutrality  but  there  are  oth¬ 
ers  who  suggest  regulating  ’Net 
neutrality  which  doesn’t  seem  to 
be  a  practical  solution. 

End  users  get  their  access  either 
through  dial-up  connections  that 
connect  to  a  remote  access  server 
or  through  a  wireline  or  wireless 
broadband  connection  At  the 
content  end,  commercial  pro¬ 
viders  are  also  typically  on  a 
broadband  connection  to  a 
router  to  one  or  more  servers. 

The  ’Net  is  oversubscribed.  De¬ 
pending  on  the  connection  type, 
the  ISP  and  the  server/server 
farm,  oversubscription  rates  range 
from  300%  to  1,000%  or  greater. 
The  “Internet”  also  shares  some  of 
the  same  equipment  as  other  data 
services  at  both  the  physical  (opti¬ 
cal)  layer  and  at  the  packet  layer. 

To  make  sure  that  services  like  a 
carrier’s  IP  VPN  or  plain  old  tele 
phone  services,  which  may  share 
core  equipment,  meet  their  ser- 
vicelevel  agreements,  carriers  typ¬ 
ically  use  a  protocol  such  as  MPLS 
to  prioritize  traffic,  giving  these  ser¬ 
vices  a  statistically  greater  change 
of  connectivity 

Service  providers  also  can  use 
various  protocols  to  further  priori¬ 
tize  traffic  at  the  customer 
premise.  When  a  user  subscribes 
to  voice  and  video  on  the  same 
router,  the  router  can  prioritize  the 
voice  differently  than  data  traffic. 

Let’s  assume  that  the  govern¬ 
ment  does  pass  a  law  demanding 
’Net  neutrality  The  tough  part  is 
enforcing  neutrality  in  every 
piece  of  equipment  on  a  per- 
packet  basis  between  a  user’s 
computer  and  a  content  pro¬ 
vider’s  server.  Will  the  law  suggest 
that  companies  should  self-police 
their  enforcement? 

If  a  governmental  agency  was  re¬ 
sponsible  for  enforcing  end-to- 
end  neutrality,  then  that  would  re 
quire  end-to-end  monitoring  of 
packet-level  traffic,  raising  a  host 
of  privacy  concerns. 
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We  must  leave  the  final  solution 
to  “market  forces”  to  solve  the 
problem.  Maybe  some  users  will 
be  sophisticated  enough  to  un¬ 
derstand  why  using  an  ISP  that 
doesn’t  charge  content  providers 


is  preferred.  On  the  other  hand, 
maybe  users  won’t  care  enough 
to  make  a  choice  in  favor  of  neu¬ 
trality  For  a  company  like  Google 
orVonage  to  mount  a  user  educa¬ 
tion  campaign  on  the  issue  may 


be  more  costly  than  just  paying 
the  ISP  in  the  first  place. 

Taylor  is  president  of  Distributed 
Networking  Associates  and  pub- 
lisher/editor-in<hief  of  Webtorials. 


He  can  be  reached  at  tcrylor@ 
webtorials.com.  Hettick,  who  is 
vice  president  for  Telecom  Services 
and  Infrastructure  at  Current 
Analysis,  can  be  reached  at 
lhettick@currentanalysis.  com. 
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Looking  for  the  new  Wi-Jack? 

The  innovative  access  point  l~* 
that’s  worth  the  search. 


f\  ' 


It's  like  u 

the  original  i|r®‘ 


Wi-Jack, 
more 
or  less. 


The  original  Wi-Jack™  set  the  standard  as  the  stylish, 
high-performance  wireless  access  point  that  blends 
smoothly  into  any  office  decor.  The  new  Wi-Jack 
raises  the  bar  by  disappearing  into  the  decor. 

While  it’s  hard  to  find,  it  easily  integrates  into  the 
structured  cabling  system.  The  new  Wi-Jack  will  be 
unveiled  at  Interop  Las  Vegas.  In  the  meantime,  visit 
www.ortronics.com/newwi-jack  for  more  information 

The  search  ends  at 
INTEROP  Las  Vegas 
May  2-4 
Booth  141 
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Cl  Travel  Manages  VoIP  Traffic  With  Observer 


High  phone  bills  were  eating  up 
Cl  Travel's  profits.  Because  reducing 
call  volume  really  wasn't  an  option, 
Cl  Travel's  IT  Director,  Paul  Ingram, 
decided  to  take  advantage  of  Voice 
over  Internet  Protocol  (VoIP)  technology 
to  reduce  per-call  expenses.  The  new 
VoIP  phones,  while  dramatically 
reducing  per-call  costs,  came  with  a 
new  set  of  problems.  To  make  the 
investment  in  VoIP  technology  really 
pay  off,  Ingram  chose  Network 
Instruments'®  Observer®  to  successfully 
troubleshoot  the  VoIP  exchange. 

Currently,  there  are  175  VoIP 
phones  deployed  at  Cl  Travel's  49 
offices  around  the  world.  Next  year, 
he  expects  there  to  be  about  300  VoIP 
phones  deployed-one  VoIP  phone 
per  employee.  Because  much  of  the 
company's  business  is  conducted 
over  phone  lines,  Ingram  has  to  be 
certain  that  VoIP  users  are  getting  the 
best  quality  of  service  attainable. 

"Bad  voice  quality  makes  people 
turn  to  the  standard  phone  system, 


which  could  quickly  eliminate  any 
savings  we  were  intending  to  realize 
with  VoIP,"  Ingram  said.  "The 
company  depends  heavily  on  phone 


communication  to  service  customers; 
calls  are  going  to  be  made  with 
the  most  reliable  phone,  no  matter 
the  cost." 

After  Ingram  purchased  VoIP  phones 
the  users  started  experiencing  VoIP 
issues.  He  researched  three  products: 
Sniffer®,  Ethereal,  and  Observer  Suite. 

"Sniffer  is  really  behind  on  VoIP 
features,"  he  said."  It  can't  even  record 
voice  packets  for  audio  playback. 
Ethereal  (an  open-source  "free"  product) 
is  actually  more  advanced  than 


Sniffer  when  it  comes  to  VoIP,  but  I 
am  not  comfortable  using  a  product 
without  any  guarantee  of  technical  or 
service  support.  Observer,  on  the 


other  hand,  was  even  better  than 
Ethereal,  and  includes  a  higher  level 
of  support  than  either  of  them. 
Overall,  I  found  Observer  to  be  the 
best  value." 

Ingram  purchased  Observer 
technology,  including  a  probe  he 
placed  on  the  WAN  backbone  to 
troubleshoot  VoIP.  In  one  case, 
Ingram  used  Observer  to  troubleshoot 
erratic  jitter  that  was  occurring 
between  his  office  and  another  office. 
He  couldn't  hear  the  problem  on  his 


end  so  he  ran  a  packet  capture  and 
played  it  back  to  hear  the  problem. 
Not  only  did  Observer  help  him 
verify  that  there  was  a  problem,  it 
also  lead  him  to  the  solution. 
A  packet  capture  identified  a 
misconfigured  application  that  was 
hogging  bandwidth  and  causing 
a  general  network  slowdown. 

"Armed  with  the  information 
provided  by  Observer,  I  was  able 
to  reconfigure  the  misbehaving 
application,"  Ingram  said.  "I  also 
defined  a  QoS  policy  on  the  switch  to 
give  VoIP  traffic  the  highest  priority, 
thereby  preventing  other  applications 
from  compromising  VoIP  reliability." 

As  long  as  VoIP  traffic  has  priority  on 
the  network,  communication  problems 
are  minimized,  allowing  Cl  Travel  to 
maintain  its  independence  from  the 
traditional  phone  system. 

"So  far,  Observer's  VoIP  capabilities 
has  helped  cut  Cl  Travel's  pnone  bill 
by  about  25  to  30  percent,"  Ingram  said. 


“So  far,  Observer’s  VoIP  capabilities 
has  helped  cut  Cl  Travel's  phone  bill 
by  about  25  to  30  percent.” 

Paul  Ingram,  Cl  Travel 


Observer  is  the  only  fully  distributed  network  analyzer  built  to  monitor  the  entire  network  (LAN,  802.11  a/b/g,  Gigabit,  WAN). 
Download  a  free  Observer  11  demonstration  today.Visitwww.networkinstruments.com/analyze  to  learn  more. 

US  &  Canada  toll  free  800-526-5958  fax  952-358-3801  UK  &  Europe  +44(0)  1959569880 
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®  2005  Network  Instruments,  LLC.  All  rights  reserved.  Network  Instruments,  Observer,  and  all  associated  logos  are  trademarks  or  registered  trademarks  of  Network  Instruments,  LLC. 
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Empower  yourself 
with  one  of  DCU's 
modular  courses. 

Take  a  FREE  course  and  enter  to  win  an 
XM  Satellite  Radio,  complete  with  a  / 
one-year  paid  subscription.  Visit 
www.ds'acenterunVersity  carn/courses 
and  enter  key  code  courses 
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Don't  neglect 
your  data 
center's  most 
valuable  asset... 

Are  you  so  busy  updating  your  data  center  technologies  that 
you're  forgetting  yourself?  Data  Center  University  (DCU) 
instructors,  who  have  run  the  largest  data  centers  in  the  world, 
will  bring  you  quickly  up  to  speed  on  how  the  latest  technology 
trends  can  affect  the  Network  Critical  Physical  Infrastructure 
(NCPI)  of  your  data  center.  No  matter  where  you  are  in  the 
design/build/operate  continuum,  you  will  learn  real  world  skills 
that  you  can  apply  immediately  in  your  own  facility. 

•  On-line,  on  demand  -  web  based  courses  deliver 
what  you  need,  when  you  need  it 

•  Modular,  under  an  hour,  self-paced  courses  - 
become  an  expert  before  your  morning  coffee  break 

•  FREE  courses  now  through  March  31st,  so  enroll  now! 


www.  datacenteruniversity.  com/courses 


<MEEE 


Data  Center  University"'  is  proud  to  be  an  Educational  Partner  of  IEEE. 


maybe  it’s  time 
you  look  at 

AdaptiveKVM'’ 

When  servers  are  down  or  inaccessible,  you  need 
fast  and  reliable  out-of-band  access  and  control. 

Cyclades  AdaptiveKVM™  (patent  pending)  is  the  industry's  first 
integrated  solution  that  combines  KVM  over  IP  and  Microsoft® 
Remote  Desktop  Protocol  (RDP)  technology  in  a  single 
appliance.  By  using  KVM  over  IP  combined  with  RDP, 
AdaptiveKVM  provides  continuous  access  for  remote  server 
management. 


Next-Generation  KVM  Solution 


AlterPath™  KVM/netPlus 

Download  a  FREE  White  Paper  on  AdaptiveKVM 

www.cyclades.com/akvm 


www.cyclades.com/nw 

1.888.cyclades  •  sales@cyclades.com 


cyclades 
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UltraMatrix™ 

Remote 
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KVM  OVER  IP 
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MATRIX  KVM  SWITCH  WITH 
INTEGRATED  REMOTE  ACCESS  OVER  IP 


System-wide  connectivity  over  IP  worldwide  and  locally 
Connects  1,000  computers  to  up  to  256  user  stations 
Supports  PC,  Sun,  Apple,  USB,  UNIX,  serial  devices 
High  quality  'video  up  to  1280  x  1024 
Secure  encrypted  operation 

View  real-time  video  from  4  computer  connections  with 
quad-screen  mode 
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KVM  RACK  DRAWERS  WITH  KVM  SWITCH  OPTION 


RackViews  offer  the  latest,  most  efficient  way  to  organize  and  streamline  your 
server  rooms  and  multiple  computers. 

The'  RackView  is  a  rack  mountable  KVM  console  neatly  fitted  in  a  compact  pull-out 
drawer.  This  easy-glide  KVM  drawer  contains  a  high-resolution  I  El /LCD  monitor,  a 
tactile  keyboard,  and  a  high-resolution  touchpad  or  optical  mouse. 


UltraMatrix™ 

E-series 


PROFESSIONAL  MULTI-USER  KVM  SWITCH 
2  -  4  KVM  STATIONS  TO  1,000s  OF  COMPUTERS 


KVM  SWITCH 


PC  or  multi-platform  (  PC/Unix,  Sun,  Apple,  others) 

On-screen  menu  informs  you  of  connection  status  between  units 

in  an  expanded  system 

Powerful,  expandable,  low  cost 

No  need  to  power  down  most  servers  to  install 

Security  features  prevent  unauthorized  access 

Free  lifetime  upgrade  of  firmware 

Video  resolution  up  to  1600  x  1280 

Available  in  several  models 

Easy  to  expand 


The  UltraMatrix  Remote  represents  the  next  generation  in  KVM  switches  with  IP  access.  It 
provides  a  comprehensive  solution  for  remote  server  access  over  IP  and  local  as  well. 


The  UltraMatrix  E-Series  represents  the  latest  in  KVM  matrix  switch  technology,  at  an 
affordable  price.  The  E-Series  allows  you  to  connect  up  to  256  user  stations  to  as  many  as 
1,000  computers.  The  UltraMatrix  E-Series  is  available  in  several  sizes:  2x4,  2x8,  2x16, 
4x4,  4x8,  4x16,  1x8,  and  1x16  in  either  PC  or  multi-  platform. 


XtendVue 

Vertical  Rack  mountable  LCD 
With  Built-in  KVM  Extender 


RackView 


Fold-Forward 


RackView 

Fold-Back 


RackView 
LCD  Monitor 


RackView 

Keyboard 


ROSE  US  281  933  7673 

ROSE  EUROPE  +44  (0)  1 264  850574 
ROSE  ASIA  +65  6324  2322 

ROSE  AUSTRALIA  +617  3388  1540 


800-333-9343 

WWW.ROSE.COM 
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The  Truth  about  Secure-Out-Of-Band 


,  .jlfejliL  '"--i  -I 

-‘•r  .iS.*.  ••  •  +-■  : 

I  T  fe+TS+a+'S  ; 

t-  •  ■'  v  +£§ 

• '  ■■  • 

‘  v ■£*** 


Terminal  server  vendors,  who  proclaim  that 
they  have  Secure  Out  Ot  Band  products,  rely 
on  RADIUS,  TACACS+  and  other  in-hand 
protocols  to  provide  security.  By  inference, 
they  imply  they  secure  out  ot  band  access 
when,  in  tact,  they  offer  only  network  security, 
which  contlicts  with  out  ot  band  access. 

A  true  Secure  Out  ot  Band  Management 
solution  should  provide  strong  security  without 
reliance  upon  network-based  protocols. 


GDI  offers: 

'i-«  Hardware  encryption  over  dial-up 
and  network  connections 
•  RSA  certified  SecurlD  authentication 
without  a  network. 

«  Patented  central  management  of  all 
remote  devices 


Full  NIST,  FIPS  140-2  certifications 

Remote  Power  control  *-n 

Homologous  world-wide  approved  •-n 
internal  modems 


CDI  has  been  building  encryption  equipment  for  over  fifteen  years.  Our  customers  and  partners  include 
major  financial  institutions,  government  agencies,  major  telcos,  utilities,  and  the  United  States  military. 


Communication  Devices  Inc. 
www.outofbandmanagement.com 


ONE  PHONE  SYSTEM 

for  many  branch  offices 


EXTend  your  PBX  to  any 
remote  location  with: 


comantnicatioiis  a  c»ei  come™. 


Seamlessly  connect  remote  sites  to  your  main  PBX  over  Tl,  IP, 
ISDN,  Frame  Relay,  Cable  Modem,  DSL.  Compatible  with:  Norstar, 
Meridian,  Definity,  Panasonic  DBS,  Toshiba,  NEC. 


Tl  or  IP 


BRANCH 

OFFICE 

CORPORATE  OFFICE 


CSU/DSU 

CSU/DSU 

fcrrrs! 

EXTender 

6000 

■  ■  ■ 

a  a  an 

PHONES 

1  PBX  ■ 
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PERFECT  FIT  FOR  BRANCH  OFFICES, 
TELECOMMUTERS,  MOBILE  EMPLOYEES 

New,  Refurb,  Installation,  Support 
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Golden  State  Foods  exceeds  goals 
with  OmniCenter 


Michael  Bourque,  Technical  Services  Manager  of  Golden  State  Foods,  speaks  about 
his  experience  with  Netreo’s  OmniCenter™  network  management  appliance. 


Golden  State 
Foods  (GSF) 
has  processed 
and  distributed 
replenishable 
supplies  to 
McDonald’s 
Corporation 
since  it  opened  its  first  restaurants 
in  the  1950s.  GSF’s  worldwide  op¬ 
erations  include  locations  across 
the  United  States,  Egypt,  Australia, 
and  Malaysia. 

Q:  What  made  you  decide  to  look 
at  changing  network  management 
platforms? 

A:  Our  network  was  growing  at  a 
very  rapid  pace  and  it  was  hard  to 
keep  up.  So  instead  of  hiring  more 
admins,  we  needed  something  to 
help  us  fight  the  battle  of  keeping  up 
with  all  of  our  locations  and  diverse 
systems. 

Q:  What  criteria  did  you  use  to 
evaluate  them? 

A:  Our  criteria  for  selection  was  first, 
does  it  interact  with  all  our  diverse 
systems.  Second,  can  this  all  be  done 
from  one  central  location  without 
impacting  the  Wide  Area  Network? 
We  also  considered  complexity.  We 
didn’t  want  something  you  needed 
to  go  to  a  week  of  classes  and  still 
couldn’t  understand  how  it  works  or 
how  to  make  any  changes.  And  final¬ 
ly  there  was  cost,  OmniCenter  gives 
you  more  bang  for  the  buck  than 
anything  else  I  have  seen. 

Q:  What  is  the  main  benefit  to  your 
company  that  OmniCenter  provides? 

A:  OmniCenter  keeps  us  alerted  and 
aware  of  what  is  going  on  so  we  can 
be  more  proactive  and  not  reactive. 
It  gives  us  an  overall  view  of  the 
performance  and  availability  of  all 
our  network  assets,  which  allows  us  to 


detect,  diagnose,  and  fix  a  problem  be¬ 
fore  any  users  were  aware  something 
was  wrong.  With  this  information  we 
can  investigate  problems,  determine 
capacity,  and  plan  for  the  future  or 
justify  technology  decisions. 

Q:  How  long  did  it  take  to  see  payback 
from  the  investment  in  OmniCenter? 

A:  The  payback  was  almost  immedi¬ 
ate.  Right  after  installing  it,  we  were 
alerted  that  one  of  our  iSeries  servers 
was  running  out  of  disk  space  and 
we  were  able  to  catch  it  before  it 
crashed.  The  financial  impact  would 
have  been  tremendous.  It  would  have 
taken  a  team  of  about  ten  highly  paid 


system  admins  and  programmers  a 
week  to  a  week  and  half  to  get  all  the 
data  back  in  order. 

OmniCenter  has  made  dramatic 
differences  in  the  lives  of  all  of  our 
IT  and  Help  Desk  personnel.  By  re¬ 
lieving  them  of  routine  “babysitting” 
chores,  OmniCenter  allowed  us  to 
reach  about  125  percent  of  our  busi¬ 
ness  goals  for  last  year. 

Q:  Many  network  management 
platforms  require  a  huge  project  to 
implement  and  take  months  or  years 
to  complete.  What  was  the  OmniCenter 
implementation  like? 


Netreo's  OmniCenter™  family  of  network  management  appliances 
have  helped  hundreds  of  America's  leading  corporations  and 
universities  dramatically  reduce  IT  management  costs  and  improve 
availability.  Our  agentless  and  clientless  architecture  makes  the 
process  of  managing  even  the  largest  and  most  complex  environments 
remarkably  simple,  and  makes  implementation  a  breeze. 


Come  see  our  in-depth  case  studies  at  http://www.netreo.net/nw/ 
and  discover  how  we  can  help  simplify  your  IT  management. 


A:  It  was  like  “flipping  on  a  switch.” 
Once  the  Omnicenter  was  in  and 
the  initial  configuration  was  setup 
we  were  monitoring  our  systems. 
In  just  one  day,  we  were  able  install 
OmniCenter  and  configure  it  to  poll 
fifteen  different  sites  and  hundreds 
of  different  devices,  including  our  IP 
video  conferencing  system.  Overall 
it  was  a  very  simple  and  stress-free 
implementation. 


Michael  Bourque  has  been  with  Golden  State 
Foods  for  9  years.  He  carries  the  MCSE, 
CCNA,  CNE,  IBM  Certified  Professional  and 
Lotus  Notes  certifications.  His  responsibilities 
include  all  aspects  of  GSF’s  network  infra¬ 
structure,  including  network  security,  email 
and  web  systems,  and  AS400. 


Network  management 
has  always  been 
complex. 


time-consuming, 
and  expensive. 


OmniCenter 

IT  Management  Redefined. 


A/e  free 

www.netreo.net/nw/ 

(866)NETRE01 
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Fault  Management  •  Performance  Reporting  •  Security  Managment  •  VoIP  Management  •  Intrusion  Detection  ‘  Protocol  Repor 
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networkTAPs 


TAP  Into  Your  Network 


Only  a  TAP  can  provide  a  complete  copy  of  data  from  full-duplex  links  at  line  rate  for 
monitoring  devices.  Without  a  TAP,  a  monitoring  device  may  be  fed  incomplete  and 
misleading  information-creating  false  positives  and  overlooking  network  problems 
that  actually  do  exist.  Visit  www.networkTAPs.com/visibility  today. 


Copper  nTAPs 

10/100 . $395 

10/100/1000 . $W£....$795 


Copper  to  Optical 
Conversion  nTAPs 

SX  or  LX . 


.$1,495 


Optical  nTAPs 

One-Channel . ....$295 

Two-Channel . ....$575 

Three-Channel  ....$U#f....$845 


To  learn  more  about  how  nTAPs  can  boost  your  network  visibility,  which  configuration  option 
is  best  for  you,  and  to  check  out  new  pricing  go  to  www.networkTAPs.com/visibility 
or  call  866-GET-nTAP  today.  Free  overnight  delivery* 


m  ce 


*Free  overnight  delivery  on  all  U.S.  orders  over  $295  confirmed  before  12  p.m.  Central  Time. 
rrTAP  and  all  associated  logos  are  trademarks  or  registered  trademarks  of  Network  Instruments,  LLC. 
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Your  Cooling  Problems 

ARE  SOLVED 


Portable  Air  Conditioning  •  SALES  &  RENTALS  •  1 3,500  to  240,000  BTUs 
Portable,  Compact  and  Self-Contained 


NEW 

internet  Ready 

Thermos*31- 


ADAPT 


INCORPORATED 

800-243-C00L  •  www.CoolestSpot.com 


American  Engineered.  American  Made...  That’s  Cool! 


“Bottom  line:  dtSearch  manages  a  terabyte  of  text  in  a  single 
index  and  returns  results  in  less  than  a  second”  —  InfoWorld 
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earch 


Instantly  Search 

Terabytes  ofJext_ 


;  3?  idreds  more  reviews  and  developer 
cuv'  studies,  see  www.dtsearch.com 

Contact  dtSearch  for  fully-functional 

evaluations 


♦  over  two  dozen  indexed,  unindexed,  fielded  data 
and  full-text  search  options 

♦  highlights  hits  in  HTML,  XML  and  PDF,  while 
displaying  finks,  formatting  and  IfiiMim ... 

♦  converts  other  file  types  (word  processor,  database, 
spreadsheet,  email  &  attachments,  ZIP,  Unicode, 
etc.)  to  HTML  for  display  with  highlighted  hits 

♦  Spider  supports  static  and  dynamic  Web  content, 
with  WYSWYG  hit-highlighting 

♦  optional  API  for  C++,  .NET,  Java,  SQL,  etc. 

Ask  about  new  .NET  Spider  API 


DeveloperQuotes  andiReviews 


dtSearch  vs.  the 
competition: 
“dtSearch  easily 
overpowered  the 
document  indexing 
and  searching 
abilities  of  other 
solutions, 
especially  against 
large  volumes  of 
documents” 

Reliability: 

“dtSearch  got  the 
highest  marks 
from  our  systems 
engineering  folks 
that  I've  ever 
heard  of” 

Results:  “customer 
response  has  been 
phenomenal” 


•ft  Choice  for  Text  Retrieval®  since  1991 


“The  most  powerful 
document  search  tool  on 
the  market” 

—  Wired  Magazine 

“dtSearch ...  leads  the 
market” 

—  Network  Computing 

“Blindingly  fast” 

—  Computer  Forensics: 
Incident  Response  Essentials 

“A  powerful  arsenal  of 
search  tools” 

—  The  New  York  Times 

“Super  fast,  super¬ 
reliable” 

—  The  Wall  Street  Journal 

“Covers  all  data  sources 
...  powerful  Web-based 
engines”  —eWEEK 

“Searches  at  blazing 
speeds” 

—  Computer  Reseller  News 
Test  Center 


A Miim 


www.dtsearch.comi 


1.408.727.1122 

info@recurrent.com 

BeCOflRjRt 

3431  De  La  Cruz  Blvd.  Santa  Clara,  CA  95054 


Looking  ahead  to  your  next  network  project? 
Need  information  now? 

Check  out  VENDOR  SOLUTIONS  for  the  most  comprehensive  information 
on  network  IT  products  and  solutions  for  your  business  including: 

>  White  Papers 

>  Special  Reports  Visit  www.networkworki.com/vendorsolution8  today. 

>  Partner  Sites 

>  Webcasts 

>  Marketplace  Product  Finder 
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BAGKSPIN 


Mark  Gibbs 


1  hat  is  e-mail  for?  1 
ask  that  rhetorically 
because  I  think  1 
know  the  answer:  to  com¬ 
municate  information. 

But  this  leads  to  a  more  complex  question:  How  much 
information  can  we  communicate  using  an  e-mail  mes¬ 
sage?  Moreover,  how  much  information  should  we  be  able 
to  communicate? 

When  e-mail  first  appeared  it  was  a  plain-text  medium 
that,  while  effective,  was  deficient  in  certain  important 
ways  that  concerned  getting  a  message  across.  A  conse¬ 
quence  was  that  people  resorted  to  ugly  devices  such  as 
emoticons. 

Since  those  early  days,  e-mail  has  evolved  and  Microsoft, 
more  than  any  other  company  has  enabled  richly  format¬ 
ted  e-mail  such  that  it  has  become  commonplace.  In 
Outlook  Express  and  Outlook  200x,  Microsoft  has  always 
offered  RTF  and  HTML  formats,  but  the  majority  of  users 
appear  to  prefer  HTML. 

The  adoption  of  HTML-formatted  e-mail  was  driven  pri¬ 
marily  by  non-technical  users  who  discovered  that  they 
could  employ  backgrounds,  animated  GIFs  and  other 
devices  to  liven  up  their  e-mail.  Developers  consequently 
jumped  on  the  bandwagon  and  started  making  e-sta- 
tionery  available,  an  endeavor  that  has  become  a  sizable 


The  format  is  in  the  e-mail 

w 


business.  I  just  did  a  Google  search  on  “email  stationery” 
and  got  594,000  hits! 

At  the  more  normal  end  of  the  e-mail-formatting  spec¬ 
trum,  users  restrict  themselves  to  fonts  and  their  attributes, 
highlighting,  indenting  and  so  forth.  I  occasionally 
receive  over-designed  HTML-formatted  e-mail  in  which 
the  sender  has  little  or  no  sense  for  layout,  color  or  even 
rationality. 

But  as  much  as  I  dislike  messaging  with  excessive  for¬ 
matting,  I  also  have  to  defend  people  who  use  it:  Anyone 
using  over-the-top  e-stationery  must  think  his  message  is 
better  using  it.  Anything  that  improves  an  e-mail  is  a  good 
thing,  as  many  people  are  not  good  writers.  Anything  that 
can  get  people  to  spend  more  time  thinking  about  mes¬ 
sage  content  should  be  welcomed. 

Formatting  also  improves  an  e-mail  for  competent  writ- 
ers.You  can  create  a  table  using  nothing  but  ASCII  charac¬ 
ters,  but  it  will  take  a  lot  of  time  and  be  far  less  flexible. 
HTML  makes  document  layout  much  easier,  which,  in 
turn,  usually  improves  informational  value. 

I  raised  the  issue  of  ASCII-  vs.  HTML-formatted  e-mail  in  a 
mail  list  I  subscribe  to  and  the  arguments  that  came  back 
against  HTML  mail  were  interesting.  For  example, “HTML- 
only  correlates  with  lack  of  clue  and  terrible  party  skills,” 
wrote  one  person,  and  “Is  there  really  any  benefit  to  HTML 
mail?  Can’t  you  express  everything  you  want  to  say  in  an 


e-mail  without  fancy  formatting?” 

We  can  assign  comments  such  as  “lack  of  clue”  to  those 
who  have  been  on  the  ’Net  a  long  time.The  reason  for 
their  distaste  of  formatting  is  that  they  almost  exclusively 
use  Unix  or  Linux  and  have  no  need  to  migrate  to  new¬ 
fangled,  proprietary  platforms  (that  is, Windows). They 
belong  to  what  I’ll  call  Old  School  E-mail. 

Another  prototypical  objection  is, “Any  email  that  con¬ 
tains  automatically  executed  code  is  bad.”This  is  true.  In 
fact,  the  security  issues  involved  are  a  good  argument 
against  the  inclusion  of  any  scripting  in  HTML  email. 

Users  who  belong  to  the  New  School  E-mail  culture  want 
to  have  the  same  flexibility  of  expression  that  they  have  in 
the  real  world  —  they  want  to  send  documents  that  are 
identical  to  those  they  produce  with  word  processors. 

We  recognize  that  the  Old  School  is  unlikely  to  change, 
but  can  we  find  a  safe,  expressive  medium  that  satisfies 
the  presentation  requirements  of  the  New  School  and 
addresses  at  least  some  of  the  Old  School’s  concerns?  My 
suggestions  are  a  limited  set  of  HTML  that  excludes  script¬ 
ing  and  Cascading  Style  Sheets  or  a  technology  such  as 
Adobe’s  Flashpaper. 

Head  over  to  Gibbsblog  ( www.nww.com ,  DocFinder: 
2382)  and  tell  me  what  you  think  of  HTML  mail  and  if  there 
are  better  solutions.  Other  thoughts  to  backspin@gibbs.com. 


ETBUZZ 


News,  insights  and  oddities 


Start-up  taps  CEO:  A  name  you  can  trust 


Paul  McNamara 


Hey,  have  you  heard  what  Paul  McNamara  is  up  to? 

No,  not  me.  And,  no,  not  my  shiny  new  blog. 

I’m  talking  about  another  Paul  McNamara  —  known 
hereafter  asThe  Other  One  —  a  Silicon  Valley  veteran,  most  recently  with  El  Dorado 
Ventures,  who  first  crossed  my  radar  when  he  was  an  exec  at  Red  Hat  in  the  late  '90s. 

The  Other  One  has  taken  the  CEO  reins  of  an  El  Dorado-backed  start-up  temporari¬ 
ly  called  Versai Technology,  which  is  holed  up  stealthily  in  what  the  company’s  new  blog 
—  www.charterstreet.com  —  calls  "an  industrial  section  of  Redwood  City  (one  of  the 
few  remaining  industrial  sections  in  Silicon  Valley).”  Versai  was  founded  by  CTO  Greg 
Olsen,  whose  previous  venture,  Extricity,  was  a  business-to-business  integration  spe¬ 
cialist  that  was  acquired  for  $168  million  in  2001  as  part  of  a  buying  spree  by  Peregrine 
Systems,  itself  snapped  up  by  HP  last  year. 

The  Other  One  sent  me  an  e-mail  recently  to  let  me  know  that  his  company’s  blog 
was  up  and  running.  "We  plan  to  use  the  blog  to  talk  about  issues  in  the  software  and 
Internet  space  and  hopefully  give  people  some  insight  into  our  thinking,”  he  says. 
Naturally,  I  askedThe  Other  One  for  details  about  Versai: 

"Here’s  what  I  can  tell  you:  We  are  a  software-as-a-service  company  _ 

with  a  twist.  We  empower  businesspeople  to  easily  create  and  use  cus¬ 
tom-tailored  [software-as-a-service]  applications.  In  some  ways  we  will 
be  competing  with  Salesforce  AppExchange,  but  our  approach  will  be 
fferent  and  our  appeal  will  be  broader.  I'll  need  to  demonstrate  this 
Tz\  point  to  you  once  I  can  talk  more  expansively  about  the  product.” 

:he  meantime,  you  can  definitely  get  a  sense  of  the  angle  from  • 
which  The  Other  One  is  coming  at  the  opportunity  by  reading  his  blog 
escay  entitled  "The  Software  Complexity  Racket.”  (The  piece  is  so  well 
wi;  m  I  don't  mind  seeing  my  name  on  it.) 

'iV-  : •  rst  time  1  spoke  withThe  Other  One  was  in  1998  when  he  was  at 
Rev  1  T't  and  I  was  writing  a  story  that  carried  the  headline  "Linux  cyn¬ 


ics.”  My  byline  and  his  quotes  promised  such  confusion  that  we  felt  compelled  to 
explain  the  lack  of  any  relationship  in  an  editor's  note.  Hope  everything  is  clear  now. 

Pay  for  podcasts? . . .  Sure,  why  not 

My  experience  with  British  humor  begins  and  ends  with  Monty  Python  (my  wife  and  I 
have  tickets  for  Spamalot  in  Boston  next  month).  And  I  don't  own  an  iPod. 

Nevertheless,  it  heartens  me  to  see  a  British  comedy  podcast  calledThe  Ricky 
Gervais  Show  now  being  made  available  on  a  subscription  basis  viaAudible.com. 

“Their  irreverent  brand  of  monkey-based  comedy  has  seen  the  weekly  half-hour  pod¬ 
cast  storm  to  the  top  of  the  iTunes  charts  and  stay  there,"  says  one  online  account. 

Don't  ask  me  what  “monkey-based  comedy”  means,  but  it  has  been  available  for  free 
on  iTunes  previously  and  will  now  cost  $7  a  month. 

That’s  good  news  if,  like  me,  you  believe  that  people  ought  to  pay  for  good  stuff  on 
the  Internet  because  the  people  who  create  it  have  to  eat.  It's  a  self-centered  ideal, 
obviously.  So  monkey-on,  you  British  cut-ups. 


RECENTLY  IN  BUZZBLOG 

McNamara's  online  archive: 

www.networkworld.com, 
DocFinder:  1032 

■  Microsoft’s  Origami 
Project  is  .... 

■  "World's  Largest  Windows 
Error  Message"  causes  stir. 

■  Google  image  search  in 
legal  hot  water. 


Meanwhile,  back  at  Buzzblog 

Week  No.  3  has  been  going  well.Traffic  is  up,  in  no  small  measure 
because  of  the  rising  tide  created  at  networkworld.com  by  hundreds  of 
thousands  of  visitors  streaming  in  to  see  my  colleague  Adam  Gaffin’s 
Times  Square  photograph  of  The  World  Largest  Windows  Error 
Message  (www.nww.com,  DocFinder:  2371).  Believe  it  or  not,  this  photo 
has  produced  more  traffic  than  anything  in  the  history  of  our  site. 

There’s  still  time  to  get  yourself  listed  on  the  low-volume  Buzzblog 
Brigade  e-mail  distribution  list.  Just  send  me  your  address. 

Spamalot  reviews  and  other  commentary  should  be  directed  to 
buzz@nww.com. 


802.3af 
Power  over 
Ethernet 


NetVanta  1224R/1224STR  Series  I  VI 

Integrated  Switch/Router/Firewall/  V 
VPN/DSU/CSU  with  PoE 
A  new-generation,  single-box  solution 
engineered  to  reduce  VoIP  migration  costs 


NetVanta  1224/1224ST  Series 

Managed  Fast  Ethernet  and 
Powered  Ethernet  Switches 


NetVanta  1524ST 

Managed  Gigabit  Ethernet  Switch 


With  every  NetVanta  switch  or  router  installed,  your  data  network 
moves  one  step  closer  to  being  fully  VoIP  ready.  Engineered  to  handle 
the  special  characteristics  of  voice  on  a  data  network,  this  advanced 
series  includes  Power  over  Ethernet,  end-to-end  Quality  of 
Service  (QoS),  stringent  security,  NAT  firewall  traversal,  and 
numerous  other  VoIP  prerequisites.  Since  NetVanta  solutions 
cost  about  50%  less  than  leading  brand  name  switches  and 
routers,  VoIP  may  not  be  nearly  as  expensive  as  you  originally 
thought.  You  just  need  the  right  hardware.  NetVanta. 


NetVanta  340 

Business-class  ADSL2+  Router 


Lower  network 
costs  without 
compromising 
quality,  performance, 
or  support  —  with 
NetVanta. 


NetVanta  3200 

Modular  2xT1/ADSL2+  Branch  Office 
Routers  with  Firewall/VPN/Voice/Dial  Backup 


NetVanta  3205/3305/4305 

Modular  2xT1/3xTl/8xT1  Routers  with 
Firewall/VPN/Voice/Dial  Backup 


NetVanta  is  brought  to  you  by  ADTRAN — a  company  that  now 
holds  number  two  market  position  in  less-than-l-Gbps  access 
routers  worldwide.  Every  NetVanta  includes  ADTRAN’s  100% 
satisfaction  guarantee,  backed  by  unlimited  telephone  technical 
support  (before  and  after  the  sale),  free  maintenance  upgrades, 
and  a  full  5-year  warranty. 


NetVanta  5305 

Modular  2xT3  Router  with  Firewall/VPN 


Register  to  win  a  free 
NetVanta  VoIP-ready  switch-router  now! 

www.  adtran.  com/voip 


NetVanta  2050/2054/2100 

Home  Office/Small  Office  VPN  Gateways 
with  Firewall/Multi-Port  Switch 


888  238  7266  Technical  Questions 
877  280  8416  Where  to  Buy 


NetVanta  2300/2400 

Medium  to  Large  Office  VPN 
Gateways  with  Firewall 


The  Network  Access  Company 


Copyright© 2005  ADTRAN  Inc.  All  rights  reserved.  ADTRAN  and 
NetVanta  are  registered  trademarks  of  ADTRAN,  Inc.  Five-year  warranty 
applies  in  North  America  and  Europe.  EN99A092605NWW 
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YOUR  NETWORK  APPLICATIONS 
ARE  ALWAYS  ON. 

NEVER  STUCK  IN  TRAFFIC. 

NEVER  SICK  FROM  BAD  SEAFOOD. 
AND  NEVER  HAVE  "A  MOMENT." 
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OVERACHIEVE. 


F5  gives  you  access  to  your  network  applications 
anytime,  anywhere.  Plus,  they'll  run  65%  faster 
on  average  while  remaining  safe  and  secure. 

The  F5  mission  is  to  make  your  applications 
do  what  they  were  designed  to  do:  perform. 

More  than  10,000  organizations  around 
the  world  overachieve  with  F5.  Can  yours? 


WWW.F5.COM 


